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PREFACE 


This book Cryptanalysis of the Single Columnar Transposition 
Cipher is a text-book. It presents to the student cryptanalyst a com- 
prehensive course of study covering the single columnar transposition 
cipher system. In line with its being a text-book, at the end of each 
chapter are either a series of questions or a number of problems 
covering the particular material or “points” presented within the 
chapter. The author feels that the problems in particular give a 
tremendous asset to the book. For not only will the problems provide 
many dozens of hours of enjoyment, but in the final analysis the 
problems will be the best actual teaching aid of the book. 

Some idea of the broad scope of the text which covers almost 
every conceivable aspect of the single columnar transposition cipher 1s 
the following: Chapter I opens the text by showing exactly where the 
single columnar transposition cipher system fits into the large family 
of cryptographic systems. The next two chapters cover encipherment 
and decipherment respectively. The next several chapters cover cer- 
tain background cryptanalytic techniques and procedures which are 
necessary in the cryptanalytic solution of the single columnar trans- 
position cipher. It is not until Chapter VII in fact that the crypt- 
analytic problem of the single columnar transposition cipher 1s 
finally discussed. By this time the student is well prepared! Beginning 
with Chapter VII cryptanalytic problems and techniques are presented 
in almost minute detail. Each successive chapter uses as background 
previously presented material, and the text finally builds up to 
the general cryptanalytic solution of the single columnar transposi- 
tion cipher, found in the next to last chapter, Chapter XV. The 
last chapter then wraps up the text with “final remarks”. At this 
point, the student should indeed be proficient when it comes to the 
analytic solution of the single columnar transposition cipher system 
— particularly if he has conscientiously done the problems! 

Of course it should be realized too that after completing the book 
the student not only will “know” the single columnar transposition 
cipher, but he also will have a fine background foundation for 
the study of other transposition cipher systems whose solutions 
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involve similar techniques and procedures. 

Finally, the author deems it Only proper to state th 
certain inadvertent errors will have “crept” 
of many hours checking, 
hopes are few. 


at probably 
Into the text, in spite 
and double checking! These errors he 
None have been made on purpose. 


With respect to the problems, all do have a solution. 
Good-luck! 


WGB 
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Chapter | 
The Family Tree 


In general all cryptographic systems may be divided into two 
large and distinct classes—code systems and cipher systems. 

A code is a cryptographic system in which varying lengths of 
plain-text, usually words or complete phrases, are replaced by 
code groups. The key in a code system is the code book wherein 
are found the code groups. Since relatively short code groups 
replace words or phrases, a code may be used for the purpose of 
obtaining brevity as well as for obtaining security. 

A cipher, on the other hand, is a cryptographic system in which 
fixed lengths of plain-text, usually single letters or pairs of letters, 
are treated in such a way as to make the resulting cipher-text un- 
intelligible without the key. The key in a cipher system often 1s a 
word, this word being termed the key-word. 

The treatment of the plain-text in a cipher system normally 
takes one of two forms; though a combination of both forms is 
possible. These two forms are: 

(1) In the case of a substitution cipher, as the term denotes, 
a substitution takes place. That is, other letters, digits, or even 
symbols, are substituted for the plain-text letters being enciphered. 
For example, if in a particular cipher system, the letters of the word 
THE are replaced by the letters UIF, a substitution has taken place 
and this therefore is a substitution cipher system. 

(2) In the case of a transposition cipher, again as the term 
denotes, a transposition takes place. That is, the plain-text letters 
being enciphered are rearranged or transposed, the rearrangement 
or transposition being the cipher-text. For example, if the letters 
of the word LAUGH are transposed as HLGUA, a transposition 
(rather than a substitution) has taken place and this then is a trans- 
position cipher system—provided of course that the transposition has 
followed a plan or system as agreed upon between correspondents. 


= 


Within both the substitution cipher and the transposition cipher 
there are many hundreds of specific systems, and when combinations 
of these many systems are considered there is almost a limitless 
number. This book deals with but one of these specific cryptographic 
systems, one which is in the transposition cipher family, the single 
columnar transposition cipher. 

Fivure | shows graphically where the single columnar transposi- 
tion cipher fits in the family tree of cryptographic systems which 
we have just discussed. 


Cryptographic Systems 


Miscellaneous 
Code Cipher (secret inks, 
Systems Systems enciphered-code, 





etc.) 










Combination 
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Substitution 
Cipher Systems 


Substitution Transposition 


Cipher Systems 
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FIGURE 1. 


Questions 


Generally speaking all cryptographic systems are divided into 
two large classes. What are these two classes? 


What is the key in the case of a code system? 


Cipher systems may be divided into two general types. What 
are these two types? 


The plain-text word AND is enciphered in a particular cipher 
system. The resulting cipher-text equivalent to the word AND 
are the letters ZMC. Is this particular cipher system of the 
transposition type or the substitution type? How can you tell? 


The plain-text message NO REPLY RECEIVED TO MY 
LETTER OF THE FIRST is enciphered in a particular cipher 
system. The resulting cipher-text message 1s: 
RRVMT TRNLE TEOFP CDLRE TOYIO 
TFIEE EYEHS 
Is this a transposition or substitution cipher system? Why? 


Chapter Il 
The Key 


In order to encipher or to decipher messages using the single 
columnar transposition cipher system, correspondents or users 
need but one thing, the key. The key in a cipher system is that 
secret element, often a secret key-word, knowledge of which allows 
a message to be enciphered or deciphered. In the case of the single 
columnar transposition cipher system this key takes the form of a 
numerical key, that is, a keyed mixed series of numbers. For exam- 
ple, a numerical key might be: 5 8 4 7 2 1 6 3. This particular key 
has a key-length of eight. That is, there are eight different numbers 
or digits in the key. Note that the digits 1 through 8 occur in mixed 
Order within the key. 

It can easily be seen that it would be difficult for correspondents 
to remember or to memorize a series of mixed numbers comprising 
a numerical key. Therefore, in the normal use of the single columnar 
transposition cipher, the correspondents, instead of memorizing a 
numerical key, merely remember a literal key or key-word. From 
this more easily remembered literal key the desired numerical key is 
then derived. Let us see now how this derivation is accomplished. 

There are various methods by which a numerical key may be 
derived from a literal key. The most common method perhaps and 
the method which will be used in this book is the following: 

Consider the literal key to be the key-word SUITCASE. From 
this literal key we desire to derive a numerical key. 

The key-word is written horizontally as follows: 


SUITCASE 


Beneath the letters of this key-word are written the digits of 
the numerical key. To begin, in the key-word SUITCASE the letter 
nearest the top of the alphabet is the letter A. Therefore, beneath 


a A cay 


the letter A is written the digit 1: 


SUITCASE 
1 


Going down the alphabet, the next letter to appear in the key-word 
is the letter C. Therefore, beneath the letter C is written the digit 2: 


SUITCASE 
| 


Similarly, the next letter to appear in the key-word is the letter 
E. Hence, beneath the letter E is placed the digit 3: 


SUITCASE 
21 3 


The next letter is I. Therefore beneath the I is placed a 4: 


SUITCASE 
4 21 3 


The next letter is S. But in this case there are two letter S’s. 
What do we do when repeated letters occur in the key-word? The 
answer is simple. Beneath the repeated letter nearest to the left 1s 
placed the next digit, in this case 5, and going then towards the right, 
beneath the next common or repeated letter is placed the next suc- 
cessive digit, in this case 6. We then have: 


SUIT 
5 


bo CE 


I ASE 
4 163 

Beneath the next letter T is placed a 7, and finally beneath the 
last letter U is placed the digit 8. The final result is: 


SU 


ITCASE 
58472 


163 

Thus, the numerical key resulting from or derived from the 
key-word SUITCASE is: 58472 1 63. 

One point might be made regarding the numerical key as denved 
from a literal key. A literal key will result in only one specific 
numerical key—provided of course that the same method of deriva- 


sim Tl eae 


tion is followed each time. However, the same numerical key may 
result from two or more different literal keys. For example, the 
numerical key 531246 results from the literal key SLEEPY 5 
well as from the literal key NICELY. 

In the next chapter we shall see how the numerical key, as 
derived from a literal key, is used to encipher a message in the 
single columnar transposition cipher system. 


N 


10. 


Questions 


In the single columnar transposition cipher system is the literal 
key derived from the numerical key? Or vice-versa? 


Is it easier for a correspondent to remember a literal key or 
a numerical key? 


If a numerical key is derived from a key-word of 12 letters. 
what will the length be of the numerical key? 


If a key-word contains a repeated letter, beneath which of 
the repeated or common letters is placed the smaller digit? 


What is the numerical key derived from the the key-word 
STEAMBOAT? 


The key-word WINTER TIME results in what numerical key? 


What is the numerical key resulting from the key-word HARD 
LUCK? 


May the same numerical key be obtained from two or more 
different key-words’? 


Is it possible to employ the single columnar transposition 
cipher system using numerical keys not derived from literal 
keys? 


Why is it normally desirous to use literal key-words instead 
of random numerical keys? 


Chapter III 


Encipherment 


Perhaps the best manner in which to describe the enciphering 
process of the single columnar transposition cipher system is to go 
through the steps in the encipherment of an actual message. ‘There- 
fore, let us be given the following: 


Message: NEED SUPPLIES AT ONCE STOP REQUEST 
REPLY IMMEDIATELY 


Literal key: SUMMER TIME 


Our first step is to obtain the necessary numerical key from the 
given literal key, in this case the words SUMMER TIME. Using 
the procedure learned in Chapter II we easily arrive at the following: 


SUMMERTIME 
81045179362 


The second step in the enciphering process is to write the text 
of the plain-text message beneath the numerical key as follows: 


SUMMERTIME 





Note that the message when written beneath the numerical key 
forms what might be termed an incomplete square. This Square 
In cryptographic terminology is called a matrix. There are two 
kinds or types of matrices, the completely filled matrix and the 
in-completely filled matrix. In the completely filled matrix the 
bottom or last line of the matrix extends completely across the bot- 


tom of the matrix, making a complete square. Putting it another 
way, in the completely filled matrix the length of the message (in 
number of letters) is a multiple of the key-length! In the example 
above, the matrix is an in-completely filled matrix. 

The size or dimensions of any matrix depends upon two things: 

(1) The length of the key. 
(2) The length of the message. 

That is, given these two things, we can determine whether the 
matrix is completely or in-completely filled. We can also determine 
the length of the columns in the matrix, the number of long columns 
in the matrix, the number of short columns in the matrix, etc. 

In order to make these terms clearer, in the example above note 
that there are ten columns in the matrix. Thus, there is one column 
for each letter or digit of the key. Note also that the length of 
a short column is four, the length of a Jong column is five, the number 
of long columns is five, and the number of short columns is five. 
Graphically, these may be shown as follows: 


Key-length is 10 
———— Ee 


Length of short 


Length of long column is 4. 


column 1s 5. 





Number of 
Number of short columns 
long columns is 5. 


is 5. 


Returning to our encipherment process, having written the mes- 
sage on successive lines beneath the numerical key, our third step 
in enciphering is to take the columns out of the matrix in numerical 
order. Thus, the first column to be taken out of the matrix is column 
lorSOQIY. This column of letters forms the beginning of the 
cipher-text message or cryptogram. The second column is I T R LI. 
These four letters follow the first five in the cipher-text message. 
Column 3 follows column 2, and so on, until finally column 10 is 


an 





reached or taken out; and the cipher-text message appears as follows: 


SOQIYITRIPESEEARLEDTEYLLS 
TDUNUMNEOEAPCEMESPPT 


Since cryptographic text is normally divided into so-called “code” 
groups, we divide the message into five letter groups, and the final 
enciphered message is as follows: 


SOQIY ITRIP ESEEA RLEDT EYLLS 
TDUNU MNEOE APCEM ESPPT 


Note that the letters of the original plain-text message have not 
been changed. They have been merely re-arranged or transposed. 
Remember also that the “key” to this transposition of letters was 


a numerical key—derived from an easily remembered literal key- 
word. 


—— ji) 
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10. 


Ld. 


Questions 


In order to encipher a message using the single columnar 
transposition cipher system, only one thing or element is needed. 
What is this one element? 


What is the first step of encipherment? 
What is the second step of encipherment? 
What is the third step of encipherment? 
What are the two possible kinds of matrices? 


If the message length is a multiple of the key-length, what kind 
of a matrix will result? 


The dimensions of a matrix depends upon two things. What 
are these two things? 


The number of columns in a matrix depends upon what? 


If there is but one common column length in a particular 
matrix, what kind of a matnx is It? 


The order in which columns are taken out of the matnx depends 
upon what? 


Using the key-word BROKER, encipher the message: SEND 
BAGGAGE TO SAN FRANCISCO IMMEDIATELY. 


Encipher the message of Question 11 using the key-word: 
SOAP SUDS. 


es, eo 


Chapter IV 


Decipherment 


Now that we have learned in Chapter III how to encipher a 
message, let us consider the decipherment of a message. In general, 
the process of decipherment is the reverse of encipherment. Con- 
sider the decipherment of the following message: 


UNCKO MNHTA NSEOT NMIEG OFPER 
NMAWO OLTGA SFHDO OLLEN YINRI 
SIECY COTOR FETNN TSGOR IPTHT 
NOETX ISENW ICXMI NREUE T 


Key-word: APPLE BLOSSOMS 


Just as in encipherment, our first step is to derive a numerical 
key from the literal key: 


The second step in decipherment is to determine the size of the 
matrix used in encipherment. This is perhaps the major crux of 
decipherment. We know the length of the key. In the key above 
the length is 13. We also can count the number of letters in the 
cipher-text message. In the above case, there are 96 letters in the 
cipher-text message. Thus, we have the two requirements to deter- 
mine the dimensions of the matrix, the key-length and the message 


length.t Dividing the key-length into the message length yields the 
following: 


7 
13)96 
91 

5 


eee 
1 See page 9. 
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The number of times that the key-length (13) goes into the 
message length (96) is the length of a short column in the matrix, 
in this case 7. The left over remainder, in this case 5, is the number 
of lone columns in the matrix. 

Let’s take another look at this division, since it is so fundamental: 


7———~>____Length of 


Given: 13509 6 short column. 
(1) Length of —2~ + 1 
key. ~ 5 ~—z___ Number of long 
(2) Length of columns. 
message. 


Since the length of a short column is 7, the length of a long 
column is one more, or 8. And too, since the number of long 
columns is 5, the number of short columns is the key-length minus 
the number of long columns (13-5) or 8. Thus, in the present case, 
given the key and the cipher-text message, we have determined the 
size of the matrix used in encipherment to be the following: 

APPLEBLO 
19104325 % 


OMS 
10 8 6 


SS 
11128 613 


Length of short 


Length of long finan te 4 


column 1s 8. 


aaa eanae eased San 
; Number of 
Number of short columns 
long columns is 8 


is >. 


Now that we know the lengths of the various columns it is 
fairly easy to proceed to the third step of decipherment, putting 
the columns from the cipher-text message back into the matrix 
according to the numerical key. Thus, looking at the empty matrix 
above we see that column 1 is a long column of length 8. Therefore, 
the first eight letters of the cipher-text message go into column 1: 


ae} ee 


APPLEBLOSSOMS 
19104 3 2 5 711128 613 
U 
N 
C 
K 
O 
M 
N 
H 


Column 2 is a short column of length 7. Therefore, the next 
seven letters of the cipher-text message go into column 2: 


APPLEBLOSSOMS 
19104 3 2 5 711128 613 


HASOROZG 





Column 3 is a long column. Therefore, the next eight letters 
from the cipher-text message go into column 3. Ina similar manner, 
the remaining letters are put into the matrix in column order. After 
the last seven letters of the cipher-text are put into column 13, the 
now filled matrix looks as follows: 


co © 
ora 
5 


FAC aAZAH 





The plain-text or clear-text message may now be read horizontally 
from left to right, top to bottom within the matrix. There may 
be perhaps a slight difficulty in reading the plain-text words, since 


— 14 — 


as can be seen there is no spacing between words. However, with a 
little practice this difficulty is easily overcome. The complete plain- 
text message reads: 


URGENTLY NEED INFORMATION CONCERNING 
NEW YORK TIMES ARTICLE ON PAGE SIX COL- 
UMN TWO OF SIXTEENTH OF THIS MONTH STOP 


Now that we have gone through the steps in the decipherment 
of a cipher-text message, in order to thoroughly keep the steps in 
mind, let us briefly compare the steps of encipherment with the steps 
of decipherment: 


STEPS ENCIPHERMENT DECIPHERMENT 


Derive the numerical key from | Derive the numerical key from 


Ist the literal key-word the literal key-word 


Jnd Write the plain-text beneath | Determine size of matrix from 


the numerical key key-length and message length 


3rq_-—«|:«*Pake columns our of matrix in| Put columns info matrix in 
numerical order numerical order 





One final remark is in order concerning the determination of the 
size of the matrix, given the key-length and the message length. 
There is another way, other than that described, of determining the 
length of matrix columns. It is simply a mechanical method whereby 
after the numerical key is written down, a number of squares are 
counted beneath the key equal to the length of the message. The 
size of the matrix is thus manually or physically determined without 
recourse to any actual mathematical computation. 


wot 1B ee 
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Questions 


Is the first step of decipherment different from the first step of 
encipherment? 


What is the second step of decipherment? 
What is the third step of decipherment? 


If the key-length is 12 and the length of a message is 83 
letters, what is the length of the short column jn the matrix? 
How many short columns are there? 


If the key-length is 7 and the message length is 92 letters, how 
many Jong columns are there? What is the length of the long 
column? 


With the key-word GEORGIA TECH read the following 
message: 


IBXRF TNCYU EIMYB TANGA TRSRT 
ONOAI XTRAO IRRTT NXSEN TAXEH 
TULXR ELOIM EOA 


With the key-word ORANGES read the following message: 


RAEON ESSUE LDESS WLTAU OWRTE 
FDOER HKGGT ROE 


With the key-word STICKY read the following message: 


RMGDN KEYNE ECYGE CFOTE NTLRL 
DMCIL TOAEE AOCO 


With the key-word TAXICABS read the following message: 


EEIIP UEUAR NTSAN MSOIQ WOONK 
DSFNE CRTAH FLHTS TIQVA RNOMI 
R 


With the key-word LEMON CAKE read the following message: 


OSEMT ERFHU BEELH YROTA SMDEO 
SENSB OOETF D 
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Chapter V 
The Monoliteral Frequency Distribution 


One of the fundamental tools of the cryptanalyst is the frequency 
distribution. Whether the cryptanalyst is attempting to solve one 
type of cryptographic system or another, almost invariably the 
frequency distribution will play a prominent role in solution. 
The reason for this is that in normal plain-text various letters 
will “in the long run” occur with a definite frequency of occurrence. 
Thus, for example, in normal English plain-text the letter E occurs 
more frequently than any other letter. Cryptanalysts who have made 
thousands of tabulations, counting plain-text letters, know down to 
a very fine point the exact “expected frequency” of each letter. A 
frequency distribution of individual letters is known as a mono- 
literal frequency distribution. 

Consider the following cryptogram: 


HEHBL LRNFN TYSED FOACS HAHTA 
ETGUL TOIRR ETAES IEEYP SIEPM 
TSMHF NBEES NITOI LESPN POSCI 
SOTAA RPROS TNTSL I[IUAFI 


A monoliteral frequency distribution of this message is made 
as follows: The normal alphabet is wntten out and the occurrence 
of the letters in the cryptogram or cipher-text message are then 
tabulated beneath the letters of this alphabet. To begin, the first 
letter of the above cryptogram is H. Therefore, beneath the letter 
H of the alphabet is made a mark or tabulation: 


ABCDEFGHIJKLMNOPQRSTUVWXYZ 


The next letter of the message is E. Therefore, in the same 
manner beneath the letter E is made a mark: 


ABCDEFGHIJKLMNOPQRSTUVWXYZ 


see TE ce 


Continuing, the third letter is another H. Hence, again beneath 
the letter H is made another mark: 


ABCDEFGHIJKLMNOPQRSTUVWXYZ 


Successive marks or tabulations are made until all occurrences 
of each letter are marked beneath their respective letters. The final 
completed monoliteral frequency distribution then looks as follows: 


oe ne ee oe 


eC —_—_—————_ ll Hl —— 


t 
| 
{ 
fll +H4 
| tt 
| +H. 
th 
HH. 


Note that every fifth mark beneath a letter is made in the form 
of a diagonal crossing the preceding four marks. This is merely to 
aid in the later counting of the total number of marks beneath 
letters. It should be realized also that this frequency distribution 
could just as well have been made vertically as follows: 


A TH |! 
B Il 
C il 


co 
=~ 
: 


iF 


ER ELPA? 


= 


NK «MESACHMNDOVOAZSZOC RU TODDy 


| 
— 
0 
| 


Now that a monoliteral frecuency distribution has been made 
of this particular message, what purpose does the distribution serve? 
Essentially of course the distribution shows the number of times 
each letter has occurred in the message. One thing the distribution 
as a whole can do is to indicate whether or not the cryptogram 1s 
of the transposition type or class, as opposed to the substitution. 
As you recall from Chapter J, in the transposition cipher system 
there is a rearrangement or transposition of plain-text letters, such 
that the final resulting cipher-text still contains exactly the same 
letters as did the original plain-text, except now in a different order. 
Thus, for example, the monoliteral frequency distribution above 
indicates that the letter E has occurred 11 times. In the original 
plain-text message the letter E must have occurred the same number 
or 11 times—provided of course that the cipher system employed 1s 
of the transposition type. 

Therefore, by comparing the monoliteral frequency distribution 
of the message with the normal or expected monoliteral frequency 
distribution of English plain-text, we can with relative accuracy 
determine whether or not the message has been enciphered by means 
of a transposition cipher system. 

The normal expected frequency of English letters in 100 letters 
of text is the following: 


Expected Frequency of English Letters 
in 100 Letters of Text 


Wyte aly 


ASCDED EH? A RUMBOPGaR TU VWEYS 
STSSa7i-F7¢F == zz ee” = a 
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Let us compare the distribution of Figure 2 which is the norm 
for English text with the monoliteral frequency distribution previ- 
ously made from the cipher-text of the given message: 


so 


Cryptogram: ABCDEFGHIJKLMNOPQRSTUVWXYZ 
E-~"$2° 2% Z°22¢ 222° © 
ar : 

The norm: ABCDEFGHIJKLMNOPQRSTUVWXYZ 
gp SEg= #2 2922" 92> 


It is easily seen that the two distributions are remarkably similar, 
particularly when the “troughs and peaks” of the two distributions 
are compared! This comparison indicates that almost certainly 
the given cryptogram or cipher-text message is of the transposition 
Lype. 

Consider now the monoliteral frequency distribution of a crypto- 
gram which is not of the transpos'tion type: 


JCTDT 
BSWEZ 
rx lox 
i DG 


BSDHC 


HCFOT 


x INGQP 
LUE? 5 


GBSAK 
DGXFL 
FLJDT 
YHXQZ 


OTBQP 
TDKLG 
YHAFP 
OY d Bod 


FNSOH 
OTNGD 
FMQEH 
OH Tt Z 


Monoliteral Frequency Distribution: 


ABCDEFGHIJKLMNOPQRSTUVWAYZ 
“EEZ°F=F°=°= =f ¢$ —=FF 
pa = a = oles i _ 


Let us compare this frequency distribution with the norm for 
English text: 


Cryptogram: ABCDEFGHI J MNOPQRS TUVWXYZ 

TEEE°225~=-= == EE £25 

= = = = 7 

The norm: ABCDEFGHIJKLMNOPQRSTUVWXYZ 
a oe ae 
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In this case it is seen that the two distributions are not similar. 
In other words, it is evident that this second cryptogram is not of 
the transposition type. 

A few comments are in order regarding the identification of a 
transposition cipher by use of the monoliteral frequency distribution. 
In the English language the vowels (A, E, I, O, U, and Y) constitute 
fairly closely 40% of the text. Therefore, in the case of the mono- 
literal frequency distribution of a transposition cipher, the vowels 
should closely approximate 40% of the text. For example, let us 
compare the percentage of vowels in the previous two cryptograms 
with the expected percentage of vowels in the norm: 


Norm First Cryptogram Second Cryptogram 
Letter Frequency Letter Frequency Letter Frequency 
A 8 A 7 A PA 
E 13 E 11 E 2 
I ? ] 8 I 2 
QO 8 O 6 O 6 
U 3 U 2 U 0 
£ I Bd 2 ¥ 6 
40 (6c) 36 (Sc) 18(%c) 


It can be seen that in the first cryptogram, which has slightly 
less than 100 letters, the vowels constitute approximately 36% of 
the text. From a “quantity of vowels” viewpoint, the first crypto- 
gram can easily be of the transposition type. However, turning to 
the second cryptogram, which we know not to be of the transposition 
type, the vowels constitute only 18% of the text. With such a small 
percentage of vowels the second cryptogram is certainly confirmed 
as being not of the transposition type. 

Without actually making a frequency distnbution, the experienced 
cryptanalyst can generally by a visual inspection alone determine whe- 
ther or not a particular cipher-text message is of the transposition type. 
Not only will high frequency letters stand out, but there may be other 
subtle indications. For example, in the second cryptogram above the 
cryptanalyst notes that the letter Q has occurred four times. The 
cryptanalyst knows too that in normal English text the letter Q is 
almost invariably followed by the letter U- But in the second crypto- 
gram there is not a single U! If the second cryptogram were of the 


eo 


{transposition type, there should be at least four U’s—one for cach of 
the Q’s. Hence, almost immediately the cryptanalyst would view with 


very strong suspicion the idea of the second cryptogram being of the 
transposition type. 


10. 


Questions 


Which letter in English generally occurs the most frequently? 
A frequency distribution of individual letters is termed what? 


Does it make any difference whether a frequency distnbution 
is written out horizontally or vertically? 


In analyzing a cryptogram what is one purpose that the mono- 
literal frequency distribution serves? 


In 200 letters of normal English text, how many times would 
you expect the letter T to occur? 


In SO letters of English text, how many times would you expect 
the vowels (A, E, I, O, U, and Y) as a whole to occur? 


Is the following cipher-text message of the transposition type? 


LRYCS TDIUI SFECI TYEAT NTOIE 
SENOE EIOOT IASSG AEFNR ANCDH 
ESSNN NHAYV DODNG AREUP BREGO 
NMOMS IIREO TLAAE HPEKI OLTH 


Is the following cryptogram of the transposition type? 


KTRSR NONCN RTKTC NRSRN RORSK 
OKNKO STONC SCSRO CNCTC TRECO 
ROREK OKECO RNRSS NRESS RECOO 
NCOOT 


The following cryptogram is believed to be of the transposition 
type. Is it? 


ESARN TEAMU TYOMT EEERN DQYUO 
EELQS WYETB UEOUN DTAIR RENQA 
SATSE ULlLQOT Tra 


The cryptanalyst in solving a transposition type cipher likes 
to find the letter Q in the text. Why? 
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Chapter VI 
The Biliteral Frequency Distribution 


We have seen in Chapter V how the monoliteral frequency distri- 
bution is made. We have also learned how the monoliteral frequency 
distribution assists in the identification of a transposition type cipher 
system. We come now to another type frequency distribution, the 
biliteral frequency distribution. 

The biliteral frequency distnbution is a frequency distribution in 
a message of all adjacent pairs of letters, called bigraphs. Thus, a 
monoliteral frequency distribution is a count of single letters and a 
biliteral frequency distribution is a count of double letters or pairs 
of letters. 

Just as we did in the case of the monoliteral frequency distribu- 
tion, let us go through the steps in the construction of the biliteral 
frequency distribution. We are given the following cipher-text 
message: 


TLOTE IEANT ETHAE HFOTS IEFBH 
TRBTO CAMRW CAEMS OEECH DIEDN 
TELNH RMLIW MLMTO 


As in the case of making a monoliteral frequency distribution, 
we begin by writing out the normal alphabet. It doesn’t make a great 
deal of difference whether the alphabet is written horizontally or 
vertically. However, it might be easier to visualize what we are doing, 
if we write the alphabet vertically as follows: 


We now start making the distribution or tabulation. The first 
two letters of the message are the bigraph T L. Therefore, as our 
first tabulation, the letter L is written to the right of the letter T in 
the vertical alphabet. We thus have: 


Following the bigraph T L is the bigraph L O. Note that the 
letter L is the last letter of the bigraph T L as well as the first letter 
of the bigraph L O. Thus, continuing our tabulation, in the vertical 
alphabet the Jetter O is written to the right of the letter L. The 
next bigraph is O T. Hence, opposite the letter O is written the 
letter T. In a similar manner, letter by letter, each bigraph in the 
message is tabulated. With the last bigraph of the message, T O, 
tabulated, the completed biliteral frequency distribution looks as 
follows: 


A—-NEME 
B-—HT 
C—AAH 
D—IN 
E-—ITATHFMECDL 
F—OB 

G — 
H—AFTDR 
I-—-EEEW 
‘oo 

=_ 
L—ONIM 
M—RSLLT 
N-—TTH 
O—TTCE 
P' — 

Q— 
R—BWM 
S-—IO 
T—-LEEHSROEO 
Ly 

—_ 

W-CM 
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It should be noted that the biliteral frequency distribution also 
may serve as a monoliteral frequency distribution. That is, by count- 
ing the number of letters to the nght of any particular letter, you will 
know the number of times that that particular letter occurred in the 
message. For example, to the right of the letter A in the biliteral 
frequency distribution above are the letters NE ME. This means that 
the letter A occurred in the message four times. It might be noted, 
however, that the number of bigraphs actually tabulated is one less 


seme, NG, ce 


than the total number of letters in the message text. The reason for 
this of course is that the last letter of the message does not begin a 
bigraph and therefore no bigraph is tabulated for the last letter of 
the message. 

How the biliteral frequency distribution is used by the crypt- 
analyst will be shown in the next chapter. 


 . 
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Questions 


The biliteral frequency distribution also may serve as a mono- 
literal frequency distribution. However, one letter will appear 
in the monoliteral frequency distribution which does not appear 
in the biliteral frequency distribution. Thus, in effect the biliteral 
frequency distribution will have an “error” of one letter when 
used as a monoliteral frequency distribution. Which letter of 
the message does not appear in the biliteral frequency distri- 
bution? 


Using the formula: 


Number of vowels in message _ Percentage of 
——eeEeEE=>===EEE——_—__—_—___—_ a * e 
Number of letters in message vowels in message 


Compute the percentage of vowels in the following cipher-text 
message: 


IFAITOL CIOPE ATTAT EUBEA UNPRZ 
SLYAP TASRO VTSIT AZOET NSLEX 
HEMGR WLOET ECYIK ZRRNK OOEEO 
S 


Is the percentage of vowels in the message of Question 2 that 
which you would expect in a transposition type cipher? 


Construct the biliteral frequency distribution of the following 
message: 


PAABI CEIEH BTTLR CCNOI HOTLA 
EDYTN FPETN NSWEA RSEFA GTTUU 
EPDED LTNOF KASXO LHOEB E 


What 1s the percentage of vowels in the message of Question 4? 


Do you believe the message of Question 4 to be a transposition 
type cipher? 


A cipher-text message contains n letters. How many bigraphs 
does the message contain? 


wen, OR acs 


Chapter VII 


Introduction to Cryptanalysis 


Given: The Plain-text Beginning of a Message 
Longer than the Key-length. 


As an introduction to the problem of the cryptanalysis of the 
single columnar transposition cipher let us consider the following 
cipher-text message which has resulted from a single columnar trans- 
position. The numerical key is unknown. 


TTDTI TIITIH NNOBT ERNOO IGSRY 
SVIAA XNAFN ASMMR IE 


However, we are given the plain-text beginning of the message, 
the words TRANSMIT INFORMATION. The manner in which 
we have gained these first two words is not particularly important 
at this time. Perhaps this message beginning is a stereotype used 
time and again by correspondents. For that matter we might 
simply say that we have “guessed” this particular message beginning. 
In any case, if this presumed plain-text beginning does not solve 
the entire message, then by “trial and error’ we might try another 
beginning until the message is finally solved. The purpose then of 
this chapter is merely to show how a message may be read, given the 
‘longer than the key-length” plain-text beginning of the message. 

We begin our solution by writing the cipher-text message without 
dividing the message into five letter groups: 


PTDTITIIIANNOBTERNGQOTIGSRY 
SVIAAXNAFNASMMRIE 


We next make a biliteral frequency distribution of the message in 
the manner described in Chapter VI. The distribution when made 
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looks as follows: 
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Let’s see now how we use this biliteral frequency distribution. 

Since we are given the plain-text beginning of the message, we 
may easily write the first few letters of the known plain-text beginning 
horizontally as follows: 


TRANSM 


Below these horizontally written letters are written the succeeding 
letters of the given plain-text: 


ass 5) one 


TRANSM 
RANSMI 
ANS MIT 
NSMITI 
SMITIN 
MITINF 
ITINFO 
TINFOR 
INFORM 
NFORMA 
FORMAT 
ORMAT I 
RMAT IO 
MATION 


In the columns which we have just made we now circle certain 
letters. In the first column, beneath the letter T, we circle those 
letters which follow T in the cipher-text message. Thus, from the 
biliteral frequency distribution which we have just made we see that 
the letter T has occurred five times; and in these five occurrences, 
four different letters (T, D, I, and E) have followed the letter T. 
Therefore, in the first column beneath the letter T we circle the letters 
T, D. I, and E, if they occur. We thus have the following: 


TRANSM 
RANSMI 
ANSMIT 
NSMITI 
SMITIN 
MITINF 

TINFO 

INFOR 
DINE OR 
NFORMA 
FORMAT 
ORMATI 
RMATIO 
MATLUON 


| 
Ws 
—- 
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In a similar manner, in column two we circle the three Ictters 
N, Y, and I, since the biliteral frequency distribution shows that the 
letter R is followed in the cipher-text message by the three different 
letters: N, Y, and I. Similarly, the appropriate letters in the remain- 
ing columns are circled and the final result is the following: 
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Examining the circled letters, it is immediately noted that there 
is but one horizontal row in which all the letters have been circled! 
This is the row INFORM. Of what significance is this? It 
simply means that in the enciphering matrix the letters INFORM 
have fallen or have occurred immediately beneath the letters 
TRANSM. For this to have happened the key-length must be 
eight and the given plain-text message beginning within the matrix 
wul look as follows: 


TRANSMIT 
INFORMAT 
ION 


Note that the letters INFORM have fallen beneath the letters 
TRAN SM. 

We can now see why in the cipher-text message the letter T is 
followed by the letter I. They are both from the first column to the 
left m the matrix. In fact, since the letters ION fall in the third 


wei, DT te 


horizontal row of the matrix, the first column to the left in the 
matrix actually begins T11; and sure enough, looking in the cipher- 
{ext message the letters T II are found. 

Since we have found that the key-length to be 8 and we know that 
the number of letters in the message is 42, we can easily determine the 
size of the matrix used in encipherment.! The matrix then with its 
known plain-text beginning 1s as follows: 


T|RIAIN|S|MI LIT 
I|N|F/O|RIM/A|T 






The problem now is to identify the above eight columns in the 
cipher-text message. We have already mentioned finding the three 
letters TII (from the first column to the left in the matrix) in the 
message. These three letters are known to head a column of six 
letters, as can be seen by looking at the matrix. Therefore, the entire 
column may be identified in the message: 


TYDTITIITIANNOBIERNOQOOILGS EY 
SVIAAXNAFNASMMRIE 


From the column’s position in the message it is evident that this 
column was the second column to be taken out of the matrix during 
the encipherment process. Therefore, the first column to the left in 
the matrix is identified as Column 2 and the entire column may be 
put into the matrix: 





TIR|AIN|S{M| IIT 
TIN/FIOIR[M|AIT 
TJOIN] | 1 1 
I} | | | i td 
H} | tl tl | 
NI | 


ee 








1 See pages 12-13. 
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In a similar manner the remaining seven columns are easily 
identified in the message, and at the same time are put vertically into 
the matrix. We end up then with the matrix filled; and knowledge 
of the order in which the columns appear in the message yields the 
recovery of the numerical key as follows: 


24735861 
TIRIA|N|S|MIT|T 


TIGIRTEAY REED 
PO|N|BY|R|AtD 
TOIAITI SIT | X|T 


HI TIS|E|V|EIN| I 


N|G| 


The complete plain-text message reads: 


TRANSMIT INFORMATION BY RADIO AT SIX 
THIS EVENING 


Note that our solution has resulted in the recovery of the numeri- 
cal key. and not the literal key-word itsclf. The recovery of the 
literal key-word is not within the scope of this text, though it should 
be mentioned that the recovery of the literal key-word, given the 
numerical key, is often possible. Such recovery may Or may not 
assist in reading messages enciphered with other keys. Where there is 
some connecting link between key-words this recovery of actual 
key-words will be course be of assistance. However, because the 
numerical key by itself will read all messages, collectively called 
traffic, enciphered with that key, recovery of the Original key-word 
While perhaps often desirable is not actually considered an essential 
element of solution. 

As a final remark concerning this rather elementary solution, 
you can see that for this method to be successful the given or known 
plain-text must be Jonger than the key-length. The reason for this 
of course is that this method of solution is based on the knowledge 
of vertical adjacent letters within a column which are identifiable as 
adjacent within the cipher-text message. In order to know these 
adjacent letters within a column, the known plain-text must extend 
beyond the length of the key. 
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NOTE: 


Problems 


This is the first chapter dealing with cryptanalytic 


technique such that problems are appropriate instead of questions. 
Though questions still will be used in one or two chapters to follow, 
problems will predominate. The problems used will be consecutively 


numbered. 
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1. Chicago police find the body of a man shot to death im a 
vacant lot. In one of his pockets are found two messages written in 
some sort of “code.” In addition, the police find what appears to be a 
message written on the back of an envelope. Can you help the police 
in reading the two messages in “code.” These are the messages: 


(1) KORKN 
NERDQ 


BHANP 
DYNEU 
ETEEE 
NO 


(2) 


(3) 


GFACQO 
SOERS 


OHCLE 
RANIT 
FTAIA 


AMDGT 
AHNGO 


HAKTW 
TDSMP 
CVSRC 


CEMIU 
ICIET 


APWRO 
DTOEU 
SESML 


The message found on the back of an envelope: 


IPENO 
i i 


SLVRN 
Use dL to 
DUONS 


KEEP ME INFORMED REGARDING STOCK 
QUOTATIONS IN CHICAGO 


2. The following message begins with the words PROCEED TO 


i A 


RHIWA EAREO CLELT 
IAVEP OFXTH TEZHE 


IVICR NORUD 


NO 


IUOUT 


3. Message begins STORAGE SPACE: 
TCLRB LTESG ASESE 


DSLET EALDE IBSTM 
IOEEE YEOPE PAEER 
O 


ae: FS ce 


EKSOR 
LFLYW 
TERTX 


IURAH 
LASAB 
NKVAV 


ESOCO 
SEZSO 
RNTHZ 


QMDPY 
NDSSE 
AUIGW 


4. Message begins LATEST INFORMATION: 


FAIRR OUTNI TRVSH SNEAR INTRA 
ARIRD TIBTC RTEAT ASTAR TIONA 
IEAMI TALPA EOLHA RONNW DIEYT 
OVCCW URLAL EFLOY 


5S. Message begins with the word CELEBRATIONS: 


ESISE FOAYH LRODC NWAHO CBIBU 
UEOIA LNOEO RDTML RSEAE HRLTL 
UBTNE HLSLEH CTEBI OT 


6. Message begins with the word ACKNOWLEDGEMENT: 


KNETE EESSE EDLHE PNTSB DCGAA 
CLAMT NIAEY ERPKW FAETE LMGNO 
CCEMO VSOOS ESH 


7. Message begins REPORT THAT: 


PTCSI RELUT WEAAI EPLLO LOTSD 
FHSET NORAE FTSSO UMTRT IARWB 
TROHH OSEAN TORHE HCTEI EIR 


8. Message begins with the word AUTOMOBILE: 


MIIST SXJSD DULEG HPTOF GXOLT 
OEFOOU TAEAI BNTFA LYIEO WAYA] 
IKREN BLIUO NCLSL RTEWB GRSCI 


NA 
9. Message begins with the word ADVERTISING: 


VGWNT OBRAR RLNES RPSTO LTRES 
AEPII TFEEN DNMIA TMPLS REEAT 
OEAITA GLREP PIGBH PPTR 


10. Message begins with the word TRANSPORTATION: 


RNGII OBRUD ARTRH NIDEN PLOOW 
TRHIIT REBAE AWEMN SLFYE TAYRL 
IAEVT ONTE 
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Chapter VIII 
The Analytic Matrix 


In the last chapter we learned how to solve a single columnar 
transposition cipher given an amount of beginning plain-text greater 
than the length of the key. The method of solution presented was 
rather simple and in fact was almost mechanical. Unfortunately, how- 
ever, in solving a cipher-text message, it is generally the exception 
rather than the rule that you will know the beginning plain-text. 
Therefore, other cryptanalytic means must be employed in order to 
read messages. So it is that our methodology brings us to more 
complicated aspects in the solution of the single columnar trans- 
position cipher. 

If you remember before the method of solution was presented 
in the last chapter, several tools of the cryptanalyst were presented 
in earlier chapters.' Similarly, in this chapter we are going to present 
“before going into deeper waters” another tool of the cryptanalyst. 
This tool, an important one, is termed the analytic matrix. 

The analytic matrix in certain respects may be said to form the 
foundation for the cryptanalytic solution of all columnar transposition 
cipher systems. In order to construct the analytic matrix for a par- 
ticular cipher-text message you need but one thing besides the 
cipher-text itself—the key-Iength. Therefore, given a cipher-text 
message and the key-length let us follow the steps in the construction 
of the analytic matrix. 


The message: 


EIPEI EUFSS ETODE ERTJR OOSCL 
NTPLH EDGRF TEEEE SAOIT SNULP 
VONPT ADAEL YVLT 


The key-length: 10 


1 The monoliteral and biliteral frequency distributions. 
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The first step in the construction of the analytic matrix is to deter- 
mine the size of the enciphering matrix, and more particularly to 
determine the nwmber of long columns and the number of short 
columns as well as the length of a long column and the length of a 
short column. We are given the key-length, in this case 10: and by 
merely counting the number of letters in the cipher-text message, 
we can determine the message Jength, in this case 64. With the 
key-length and the message length we can easily compute the size of 
the enciphering matrix.1. Thus we know that the message above is 
divided into four long columns of Iength 7 and six short columns of 
Jength 6. We usually express this in short form as follows: 


The short form is verified at a glance, since 4X%7=28 plus 
6 6=36 equals the length of the message 64. 

After determining the size of the enciphering matrix our second 
step 18 to divide the cipher-text message into long and short columns 
with the long columns going at the head of the message and the short 
columns at the tail of the message: 


EIPEI EUFSS ETODE ERTIJR O/SCL 
NTP/LH EDGRF TEEEE/SAOIT SNULP 
VONPT ADAEL YVLT 


Thus the first 28 letters of cipher-text are divided into four long 
columns and the last 36 letters of cipher-text are divided into six short 
columns. 

The third step of our analytic matrix construction js to Write down 
vertically from left to right these divided columns, keeping the 
bottoms of the columns on the same line. Thus: 


' See pages 12-13. 
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EORTGETVDL 
UDOPEREESWAT 


These letters are the foundation of the analytic matrix. The fourth 
and last step is to extend the tops of the columns from right to left such 
that the long columns come at the tail of the message and the 
short columns at the head of the message. We begin by drawing a 
line across the top of the present columns: 


Cm oH 
VT On Dans 
OMuUnAwD hy 
Zran © 
Daoommter 
eomer mea com. mes 
NrHrHOpPpMmM 
otamcz 
>roOPrPHid'Z 
Aiea 


im a 


Starting with the short columns on the right we now make the 
columns long. Thus, the first short column on the right is made 
long by adding one additional letter which comes from the bottom 
of the adjacent column to the left. Above the letter in the adjacent 
column is drawn a line. We thus have: 


EF E O A 
ISESLFSNNE 
PSRKRCHTAUPL 
EETLEEOLTY 
LTTINVELPFPAY 
EORTGETVODL 
UDOPRESOAT 


The next column, still going from right to left, is made long by 
adding two letters at the top which, as in the case of the first column, 
come from the bottom of the adjacent column to the left. Again, 
above these two letters in the adjacent column is drawn a line. Thus: 


a. 


. 
EFEO OA 
ISESLFSNNE 
PSRCHTAUPL 
EETLEEOLTY 
ITJNDEIPAV 
EORTGETVDL 
UDOPRESOAT 


Note that the lines being drawn above the letters on the bottoms 
of the columns are an aid to extending the columns above, since above 
the drawn line will be a column length. So far we have made two 
short columns into long columns. We extend two more short 
columns making a total of four extended long columns: 


O< 
> 





CAH it wHE 
Gon wynny 
ODMUGNE 
yHyZrMamo 

ot @ Sl tik 

MAA olys 
NIHO> Hn Amy 
OoddurddanwnH 
blo > Hy Zz 
sma 


At this point, still going from right to left, we extend the remain- 
ing columns, not however into long columns, but into the remain- 
ing six short columns. Thus, in the next column to the left only 
four letters are added to the top of the column. This extends 
the column above the drawn line the length of only a short column. 
As was the case with the other columns, a line is drawn above the 
four letters in the adjacent column to the left. We have then: 


EE 

DEI 

GETV 
EFEO| RESOA 
ISESLFSNNE 
PSRCHTAUPL 
EETLEEOLTY 
ITJNDETIPAV 
EORTGETVDL 
UDOPRESOAT 


| 
> 
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In a similar manner the remaining columns are extended the 
length of a short column above the drawn line, and the final completed 
analytic matrix looks as follows: 


JLEE 
ORNDEI 
UDOTGETV 
EFBRO|PRESOA 
ISESLFSNNE 
PSRCHTAUPL 
EETLEEOLTY 
ITJNDEIPAV 
EORTGETVDL 
UDOPRESOAT 


Note that the lengths of the columns—above the drawn lines at 
the bottoms of the columns—are from mght to left the four long 
columns and then the six short columns. 

Just what does this analytic matrix represent? 

The analytic matrix represents the columns of the enciphering 
matrix in numerical order from left to right, thus: 


Numerical Key 
12345678 910 
JLEE 
ORNDETI 
UDOTGETY 
EFEO|IPRESOA 
ISESLESNNE 
PSRCHTAUPL 
EETLEEOLTY 
ITJNDEIPAV 
EORTGETVDL 
UDOPRESOAT 


Because we do not know which columns are actually long columns 
and which are actually short columns, the columns of the analytic 
matrix will contain superfluous letters which belong in an adjacent 
column. However, regardless of how the long and short columns are 
arranged in the actual enciphering matrix, the columns of the analytic 


=) 
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matrix will contain all the letters of the columns as found in the 
actual enciphering matrix. 

The analytic matrix will be used frequently in chapters to come: 
and the student should be able to quickly construct the analytic 
matrix, given only a message and key-length. 


sae EF 
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Questions 


In order to construct an analytic matrix you need but one thing 
beside the message itself. What Is it? 


What is the first step in the construction of the analytic matrix? 
What is the second step? 

What is the third step? 

What is the fourth step? 


Construct the analytic matrix of the following message, given the 
key-length 9: 
IHAST TMXML SHDLY GITEU DAARI 


DELUI ASOEV GLOTO ESEEB SRYTU 
SEWDN UTRSC NELAH LERIA TREXA 


E 


Construct the analytic matrix of the following message, given 
the key-length 6: 


EAASP LIIEN SQSNO OERET SSBUS 
COSRS AAI 


Construct the analytic matrix of the following message, given 
the key-length 8: 


UQEGO DTNAO EUVHS OEIEY QSRUT 
digs 


cin AS, mee 


Chapter IX 


Cryptanalytic Solution 


Given: Plain-text Longer than the Key-length 
Anywhere in the Message. 


We have already considered in Chapter VII the problem of 
Cryptanalytic solution, given the “longer than key-length” plain-text 
beginning of a message. In this chapter we are going to take up 
the same problem with one exception—the known plain-text does not 
specifically have to be at the beginning of the message. Instead, the 
known plain-text may be anywhere in the message. Note, however, 
that the condition that the plain-text must be longer than the key- 
length still exists. 

Let us go through the solution of a typical problem. We are given 


a Cryptogram with the name of the ship QUEEN ELIZABETH 
suspected to be therein: 


BIEEH VHBSR UAHEE OREBE ECOWV 


NTETM TAQZT TDRNI EESNE ELOLO 
EOERL NINNF R 


Our first step is to find the key-length of the enciphering matrix. 
‘To do this we follow the same procedure as in the case of the 
problem in Chapter VII. Thus we begin by making a_ biliteral 
frequency distribution of the message: 


A-—-HQ 

B-1 SE 

OG =i) 

D— 
KE—-EHEOBECTESELOR 
F—R 

—_— 

H-VBE 

I—EEN 

T x 


| 
£ 
| 


K— 
L—OON 
M—T 
N-—-TIEINF 
O—RWLEE 
— 

Q-Z 
R-—UENL 
s-RN 
T-—EMATD 
U-A 
V—HN 
W-V 

Fs 

Y— 

(ek 


With the biliteral frequency distribution constructed, just as we 
did in Chapter VII, we write horizontally the first few letters of our 
given or known plain-text: 


QUEEN 


Beneath these letters succeeding letters of plain-text are written: 


In the columns thus extended those letters are circled which follow 
the top column letter in the biliteral frequency distribution. The 
result is the following: 


wang OS anes 
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eo > N 


) > NH 
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rN eM Ah ClO 
BEN eta zen! c 
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Examining the circled letters it is immediately seen that the 
row ZABET is the only one in which all the letters have been 
circled. This indicates that in the enciphering matrix the letters 
ZABET have fallen directly under the letters QUEEN; and for 
this to have happened the key-length must be eight, i.e., 


QUEENELI 
ZABETH 


Note that up to this point our cryptanalytic procedure has been 
exactly as that in Chapter VII. However, our technique now changes. 

Knowing the key-length to be eight we are now able to construct 
the analytic matrix of the message: 


BOWANE 
BSRVQ|IILR 
IRENZEOL 
EUBTTELN 
EAEETSOI 
HHETDNEN 
VECMREON 
HEOTNEEF 
BOWAILRR 


| oe 


Our next step is to juxtapose or to rearrange the columns of the 
analytic matrix to agree with the already known portion of the en- 
ciphering matrix: 


QUEENELI 
ZLABETH 
Q 


This is not a difficult task. For example, the vertical letters 7 
are easily identified as being in Column 5 of the analytic matrix and 
the vertical letters y as being in column 2. Therefore, these two 


particular columns may be juxtaposed as follows: 


EENELI 
BETH 


MAWOHWHNWINOPHAS uw 
OM Mriqmwnayw wn 


In a similar manner the remaining columns are easily identified 
and added to the juxtaposition: 


S20 64 0 7 8 
C 
MBEROBER 
TSONWILL 
ARRIVEON 
QUEENELI 
ZABETHON 
THESEVEN 
TEENTHOF 
DECEMBER 
ROOET R 
N WLA 

I 


| 
+ 
~ 
| 


By inspection of the resulting juxtaposition it is evident that 
the plain-text message of 61 letters lies within the juxtaposition as 
follows: 


5236417 8 





C 
MBE/ROBER 
TSONWILL 
ARRIVEON 
QUEENELI 
ZABETHON 
THESEVEN 
TEENTHOF 
DECEMBER 
ROOET R 
N WLA 
i 


The superfluous Jetters are eliminated; and keeping the order of 
the columns the same, Column 6—containing the first Ictter of 
the plain-text message—is put on the left. The result is the original 
enciphering matrix and numerical key. 


OHAHANOPAu 
AA mreann tw 
QOAwwwDo] vw 





My I HI co 


BANA wa 
SHAmMyAazdsoa 
coeone Merl coMcoM eames) ian 
HBOmMOrorsB~x 





And the plain-text message 1s: 


ROBERTSON WILL ARRIVE ON QUEEN 
ELIZABETH ON THE SEVENTEENTH OF 
DECEMBER 


Several remarks may be made regarding this cryptanalytic solution. 
The student should note that in the process of juxtaposing the columns 
of the analytic matrix, in addition to merely identifying columns by 


— 48 — 





the known plain-text portion of the enciphering matrix, use can and 
should be made of combinations of plain-text letters that appear on 
other rows of the analytic matrix. In other words, proper juxtaposi- 
tion of columns of the analytic matrix depends not only upon the 
known plain-text portion of the enciphering matrix, but also upon 
plain-text appearing on other horizontal rows. 

It should also be noted that this method of cryptanalytic solution 
does not depend upon the known plain-text being located at any par- 
ticular point within the message. Thus, this method may be used with 
success even though, for example, the known plain-text may turn out 
to be at the beginning of the message. In other words, this is a more 
general solution than that of Chapter VII. 


a 


Li. 


Jian 


13, 


Ad 


16. 


Problems 


The following message contains the words PRESIDENT 


JACKSON: 


AANXO 
JTOST 
RGENC 
LEATN 


RAHOE 
LCTRE 
HLSEE 
OAO 


The following message 
CALIFORNIA: 


CLNNE 
AGOFO 
ANEEA 
LARWO 


PEDFH 
ISOTT 
TEOTO 
RNEDC 


AERYD SKCDC SIECP 
CEREL NCOTF GUGIS 
IISHE OWAAN DOTIRU 


hO kX 2 I 
AEELI 


BGINR GSEEE 


ORLSA 


contains the words LOS ANGELES 


EYGNI 
NLUNY 
NSLNP 


SDOTC 


UCITW OFTSU T 


The following message contains the word CONDITION: 


WEETC TIDSE PRERI 
LTPSP VNOME NAASE DNIE 


SDASR UOOIN 


The following message contains the words PLEASE ADVISE: 


VEFAC BLICN ARPTE EELST OAEDR 
NEEES RNODS RAEEO MEESS HIWEI 


EPDAV 


SANMP 


Vv 


The following message contains the word ACKNOWLEDGE: 


EOGDT WENNP FOLAT NOHKE DCRLP 
IADES CNESO LARPG CGAIS 


ESDEO 
INP 


The following message contains the words RECEIVE IN- 
STRUCTIONS: 


CWISE 
EFION 
OOIDR 
IIFIR 
TGTRP 


OPTPR 
SELRE 
RHOWT 
EFPOI 
OLSNT 


Bhat T 
NEMSB 
ILTAO 
NONNE 
TCITL 
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HHTNA 
AOQIAE 
VOTSE 
AIECN 


ANIEU 
TI HHH 
OCMPT 
CCFTT 


re 


18. 


20. 


The following message contains the words SAN FRANCISCO: 


RRTRP ETHSV CGOIU ABRAE TEERI 
ISSTL DPYAF AIKVN SLACT OHMTU 
INI YR QEPLN OHCAE OWEIH COID 


The following message contains the words TWO THOUSAND: 


TLLUL ESLNO EMTUS AVILS TTDRT 
EEOOR DLBHJ WAEEA EISNE ARWBT 
EIYAQ ESIDT IUHDM 


The following message contains the words TELEPHONE 
CALL: 


TLECT NNOIA COOCD HEIEN VYABT 
EEWTR BPCRD MLNEE ENTLA HEDIR 
NEAYI SEOLR TIAIL ELSHH WP 


The following message contains the words CALIFORNIA 
ORANGES: 

AGHEE TSISE TURRO NEOEO NNRET 
HTECN TNBRN EFOLM RCAIR UOOHS 


ULEEX SEUIA NHAAC HOOHT CNAPA 
TFPATI SROVN TNCSA BTSTI L 
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Chapter X 


Cryptanalytic Solution 


Given: The Key-length and a Completely 
Filled Matrix. 


In Chapter III it was stated during discussion of the ‘“encipher- 
ment” of the single columnar transposition cipher that matrices were 
divided into two types: 

(1) The in-completely filled matrix. 
(2) The completely filled matrix. 

Up to this point we have not seriously considered the possibility 
of correspondents employing the columnar transposition cipher using 
a completely filled matrix. In fact, almost all examples and problems 
up to this chapter have been of the in-completely filled matrix type. 

To the cryptanalyst the completely filled matrix type columnar 
transposition cipher is by far much simpler of solution than the in- 
completely filled matrix type. The reason for this briefly is that the 
completely filled matrix type columnar transposition cipher has but 
one column length. Thus, there is no problem of long columns and 
short columns to contend with. Exactly why but one column length 
helps the cryptanalyst will be brought out in this chapter. 

The reason that the completely filled matrix type problem is 
taken up for the first time now is that this chapter introduces the 
student to the cryptanalytic technique termed column matching. 
Because column matching is greatly facilitated when column lengths 
are known, the completely filled matrix type problem is ideal to use 
when introducing this technique. 


Therefore, let use solve the following cryptogram, given the key- 
length of six: 


GLLEF PLUOT HERPI RDEBC NLGEF 
NNBAR SETHO TEYWP EHIAO LIRMC 
SERTS VIIEH EALPO OEAFW Tx 


wy HY e. 





The message length is 72 letters. Since the given key-length of 
six goes into the message length evenly (12 times), the enciphering 
matrix is a completely filled matrix with a column length of 12. 
Thus, the analytic matrix for the message is as follows: 


l2z2a4%3 6 


GREEME 
LEPNIXLGS 
LINWSL 
ERBPEP 
FDAERO 
PERHTO 
LBSISE 
UCEAVA 
ONTOIF 
Tf bHG LW 
HGOILTET 
EETRHX 


Compare this analytic matrix (with but one column length) 
with the analytic matrix constructed for a message enciphered with 
an in-completely filled enciphering matrix.’ 

Solution depends now merely upon re-arranging these six columns 
into numerical key order! 

The cryptanalyst has in general two lines of attack in the re- 
arrangement of these columns. He may use the technique of anagram- 
ming expected combinations of letters. Thus, for example, he may find 
the letter O on a row. Since the letter Q is almost invariably followed 
by the letter U, there should be a letter U on the same row—unless 
by chance the column with the letter Q is the right hand column, 
in which case the column with the letter U will be the left hand 
column and the letter U therefore will be on the row beneath the row 
containing the letter Q. Thus, the column containing the letter Q 
may be placed in front of the column containing the letter U. This 
placing of one column next to another column is termed column 
matching or column juxtaposing. In addition to the bigraph QU, 
the cryptanalyst might also use other “good” combinations of 





1 See Chapter VIII. 
oo 


letters. such as CK, TH, etc. Also the cryptanalyst might attempt 
to anagram common or expected words or portions of words using 
letters from one row. The cryptanalyst’s second line of attack 
IS More general and does not by itself depend upon anagramming or 
the guessing of letter combinations. This second line of attack is 
particularly important and will be presented in some detail. 


One column is selected, say for example, Column ] from the 
analytic matrix above: 


MMyocrvwAaweeeal- 


Unless by chance this Column | is the right hand column of the 
enciphering matrix, to the right of Column 1 will stand one of the 
remaining five columns. Thus, there are five possible juxtapositions: 


12 13 14 15 16 
GR GE GE GM GE 
LP LN Li ¥ LC LA 
L I LN LW LS LL 
ER EB BE EE EP 
FD FA FE FR FO 
PE r’ ik P PT | 6 
LB LS L I LS LE 
UC UE UA UV UA 
ON OT OO Ol OF 
TL TH TL T I TW 
HG HO H I HE H T 
EE ET ER EH xX 
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Letter Contact Weight Chart 
ABCDEFGHIJKLMNOPQRSTUVWXYZ 

















Aj j2]2|1|_ 22/2) (2j1|1]1\_, 
Bii{t| | zl "1 sHesesie 
Cl2| | | j2) | j2ii) j2ir Ty jaity tt 
pj2t|_|i/2/r/— Ta aa 
E/2| Lay phe gets SI 
Fyiy | yf tj | jt a 2) | jt) jif2) 

Gri ai. | jaat | phe f bed | | 2] | {li} 
Hi3{ | | |4 hk Ty 2 
L/1/1/2/iai1 | BSHnun 
Jy1) } | ftp yy eee Pe fat ft fy fi 

Kiii ' ) bel a le puya| [| fly ft 

L/2; | {2/3| | | [2 Bun are 

ee atte Ay | | | ja 

Nil| {1/2/1 } j1j2 L]1| {1/1} | 
Of1liaiili) (3/ay fi) f2}1 gr2a221- 
Pl, tf] (aly wi BCH _ 
ah | Pf r | | 5 

Ri Heir 2 ber tae 
Ser) 7 jy 7 1/3/2] 
Tec eli 1)1j2/2) ja) | 
UTA HIT —(2/2[2{_ "| 
Vi2| . | l4) |. “Err 
Wie | i2) | (sie, | | a TEE 
Xl) ay fay a | jay 
YT ee 2 aeen 

mi yi | is | 








To find the weight of a given bigraph, the first letter of the bigraph is 
found in the vertical column of letters on the left side of the chart and the 
second letter of the bigraph is found in the horizontal row of letters at the 
top of the chart. At the intersection of these letters will be found the 
weight of the bigraph. Thus, the bigraph QU has a weight of 5, WH has 
a weight of 3, etc. 


FIGURE 3. 
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The question now is which of these five possibilities is more likely 
to be the correct matching of columns? To answer this question we 
employ a “letter contact weight chart.” This “letter contact weight 
chart” is shown as Figure 3 on the reverse page. The weights given 
in this chart are somewhat general in nature and the particular 
weights given are roughly dependent upon the expected frequency 
of occurrence of the bigraphs plus the concept of “good” bigraphs 
such as QU, LY, CK, TH, etc. The manner in which this “letter 
contact weight chart” is used is as follows. 

Each of the five possible juxtapositions consists of a column of 12 
bigraphs. These bigraphs have certain “weights” as determined by the 
“letter contact weight chart.”1 These various weights are then 
tabulated and a total weight, termed the validity weight, is obtained 
for each possibility. This tabulation is as follows: 


12 13 14 15 16 
GR 2 GE2 GE2 GM 0 GE 2 
LP 0 LNO LY 38 LC 0 LA 2 
LI 2 LN0O LWO0O LS 1 LL 2 
ER 2 EB0O EP 1 EEO EP 1 
FD 0 FA 1 FE 1 FR1_ FO 2 
PE 2 PR2 PH1 PT 1 PO 2 
LB 0 LS 1 LI2 LS 1 LE 8 
uc 1 UE1 UA1 UV0 UVA1 
ON 3 OT 2 O01 #4OI1 1. OF 38 
TL 0 TH4 TLO TI 38 #=TW1 
HG 0 HO2 HI 2 HE 4 #4HT 1 
EE 0 ET 0 ER2 EHO EX 3 
12 15 16 12 23 


Examining the validity weights of each of these possible matched 
columns we find that the most favorable possibility is that of Column 
6 being to the mght of Column 1. That is, the 12 bigraphs 
formed by the juxtaposition of Column 6 to the right of Column ] 
are “as a whole” bigraphs with higher weights than bigraphs in the 
other possible matched columns. In fact, the experienced cryptanalyst 


' How to find the weight of a specific bigraph is shown at the bottom of 
the ‘‘letter contact chart”’. 
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can almost visually look at matched columns and with a high degree 
of accuracy determine their validity. However, the “letter contact 
weight chart” is often of assistance even to the experienced crypt- 
analyst. 

Thus far, we have determined almost “mechanically” that the 
most favorable possibility in the matching of these columns is that 
Column 6 is juxtaposed to the right of Column 1. We might 
continue solution by matching other columns using only validity 
weights. However, the cryptanalyst normally uses simultaneously 
both his lines of attack! in re-arranging the columns of the analytic 
matrix. Thus, for example, it is noted in the two columns already 
matched that the bigraph LL is in the third row from the top. 
In English the combination of letters LL is normally preceded by a 
vowel. Therefore, with this in mind let us examine the analytic 
matrix and see which column might go in front of Column 1. 


The Analytic Matrix Columns Already Matched 
2340 1 6 
REEM GE 
PNYC LA 
INWS LL 3rd row 





PorwzAogwwsAUonD 
HOMH mA nArPw 
MH ProryH tad 
Time ee SNH 
MimHodruwart 
My amPrPmodrnt 


The only vowel available to precede the bigraph LL 1s the letter 
I in Column 2.2. Therefore, let us place Column 2 to the left of 


Column 1: 





1 (1) Anagramming expected combinations of letters and (2) using the ‘‘ letter 
contact weight chart’’. 

° This is with the assumption, of course, that column 1 js nof the left 
hand column of the enciphering matnx. If by chance column 1 is the 
left hand column, the vowel necessary to precede the letters LL would 
come then from the next higher row, i.e., row 2. 


see I cs 





NO 
or 
=P) 





AOrAawnweomnsy 
BMH oOcCryawrrea 
SHAS Mr wWoOCwr Sy 


Visually the three matched columns look pretty good. Note 
particularly such good trigraphs as BLE, GHT, etc. We may presume 
therefore that the columns are correctly matched. The student him- 
self may finish matching the remaining three columns in the same 
manner, using simultaneously the “letter contact weight chart” and 
the technique of anagramming expected combinations of letters. 

The final correct juxtaposition of the columns of the analytic 
matrix yields the original enciphering matrix: 


35421 6 
EMERGE 
NCYPLA 
NSWILL 
BEPREP 
AREDFO 
RTHEPO 
SS IBLE 
EVACUA 
TIONOF 
HILLTW 
OEIGHT 
THREE X 


And the original plain-text message Is: 


_— 


EMERGENCY PLANS WILL BE PREPARED 
FOR THE POSSIBLE EVACUATION OF HILL 
TWO EIGHT THREE X 


A few final remarks are in order, particularly with respect to the 
reliability of the validity weights in column matching. As a general 
statement we may say that the longer the columns, the more reliable 
become the validity weights of the columns matched. Generally 
speaking, a random bigraph—from a mis-matched juxtaposition— 
has a weight of 1. Thus, a mis-matched pair of columns of length 
10 will yield an ‘“on-the-average” validity weight of 10. On the 
other hand, a valid bigraph—from a correctly matched juxtaposition 
has an average weight of 1.5. Therefore, if the column length of 
of a pair of correctly matched columns is 10, the validity weight of 
the matching ‘“on-the-average” will be 15. These values of 1 for 
a random bigraph and 1.5 for a valid bigraph are only approximate 
and a different “letter contact weight chart” will of course give 
rise to different on-the-average random bigraph and valid bigraph 
values. 

Finally, it should be stated that column matching is not something 
which is entirely “mechanical.” In fact. it is probably more of a 
learned “art” rather than a “science.” The student must practice to 
become proficient and the secret of success as in may lines of 
endeavor may be expressed in the three words “don’t give up!” 
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Problems 


21. The following cryptogram has a key-length of 13: 


ae, 


24. 


rsa 


CENSH 
INRTE 
TDSPA 
BROOR 
CHSNR 
PEEOS 
OSNOT 


QCESO 
AWUHM 
PCGES 
EJUHN 
NBHQL 
INEMT 


TT IHR 
rPeUOT 
EERHC 
OU 


AUEWC 
TTJIR 
ACLWS 
OONGW 


OLOETI 
Cs OTy 
PSLET 
EOWRF 
APLFR 
TDONI! 
Y 


DOFDA 
NAOTE 
ETEEU 
TTOTO 
QRECE 
K P 


BVOGA 
AATRA 
CIEMA 
RIOHA 
GSSDP 
ADNPM 


OEAMA 
ESCJO 
LUENH 
ye ea 
TLDEI 


AANER 
HESFE 
LTILP 
SRSEC 
FSSUI 
ASSRM 


ETERH 
EABBO 
NSRAT 
THSBT 
ETRTS 


The following cryptogram has a key-length of 7: 


TPLNA STSRE FTNDO 
IMRMU MAEEG EFTRP 
IUYFN OEQNH 


TOOYO 


MFIHO 
NELEP 
EOCEE 
PSLHO 


TOTOE 
CNTIT 
ne DF 
KEOSHE 


The following cryptogram has a key-length of 9: 


HI EXE 
DEOL f 
PPNTO 


The following cryptogram has a key-length of 8: 


SRPBA RRIUF UAROU EIOPS 
MLERH TOQNS HOYQP RIREN 
IEDEE DEOES FDDS 
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ABJER 
SNLNA 
EAKOS 
OLAGF 
IDORI 
NOITR 


The following cryptogram has a key-length of 12: 


LFGAO 
SS TKO 
HHSEA 
OETTR 
OESPT 


EEAST 
EUVDS 
VLRNO 


SRWLR 
LRETN 
DDBDE 


WUARITI 
KARTO 





20, 


a). 


The following cryptogram has a key-length of 9: 


CIODI IPSPH IRCME I1OCEH ATTVR 
UDHCR ONNFN EAILA NMEBC LNLFA 
DOEOH WTONG RFRRT RRXAN GAIEO 
LTOOI COIEL REEKS 


The following cryptogram has a key-length of 9: 


XAUCI GTEET WATPC NEITT DIDYT 
BDSST CTEND ITERL MHTEM ALIIP 
TNKNH EEHOA GIA 


The following cryptogram has a key-length of 11: 


IEMWD SHRKA TETAF ETRYT RASLR 
ITEEU SMREF ULPOR TDBEQ ELOHS 
QAETE 


The following cryptogram has a key-length of 11: 


APXAI IKCTA ODSGS PEHLT IEAAE 
EOAWA RVVNE ASSTY IIHEE SGVBN 
BCAEE GELKY PRDKO RPEIM DDGDG 
NY 


The following cryptogram has a key-length of 7: 


CIGDW WESRT NCTLY OTINS ANKTE 
LETDF AEREC AHOTW UNEI1 AMTNL 
IEREN 8 
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Chapter XI 


Identification of the ‘‘ Completely Filled Matrix ” 


Chapter X covered the solution of the single columnar transposi- 
tion cipher where the cryptanalyst was given the key-length plus the 
added condition that the enciphering matrix be a “completely filled 
matrix.”’ Since solution of the single columnar transposition cipher 
system ts relatively easy when the enciphering matrix is completely fil- 
led—as compared to the in-completely filled matrix—the cryptanalyst 
should not overlook the possibility that correspondents might be using 
completely filled matrices. The use of completely filled matrices 
may be intentional with every message or perhaps might simply be 
the result of chance. In any case, there are means for the crypt- 
analyst to identify cryptograms which have been enciphered with com- 
pletely filled matrices. These means, however, unfortunately do not 
always give positive results. That is, by an examination of the crypto- 
gram the cryptanalyst cannot always state flatly yes or no, whether or 
not a particular message is the result of a completely filled matrix. On 
the other hand, quite often the results are negative. That is, often the 
cryptanalyst can definitely rule out the possibility of a completely 
filled matrix. Finally, of course, the results may be indefinite. 
However, the means used by the cryptanalyst in testing for the use 
of a completely filled matrix are valuable, and this is the subject 
of this chapter. 

Let us begin by taking a look at another tool of the cryptanalyst. 
This tool is a table titled “Table of Key-Lengths and Column-Lengths 
of Completely Filled Matrices—Given the Message-Length.” This 
table is shown as Figure 4 beginning on page 70. 

Using this table the cryptanalyst is able to determine whether or 
not a particular message might have been enciphered with a complete- 
ly filled enciphering matrix. In other words, the table lists the sizes or 
dimensions of enciphering matrices given the message length plus the 
condition that the enciphering matrix be completely filled. It must 
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be realized, however, that simply because the table indicates that the 
length of a particular message is a length which might have come from 
a completely filled matrix, the message does not necessarily actually 
have had to have resulted from a completely filled matrix. 

Just where does this leave the cryptanalyst? First of all, the table 
indicates that certain lengths (about 30% of all lengths) cannot have 
resulted from completely filled matrices. Secondly, as previously 
stated at the beginning of this chapter, the cryptanalyst does have 
means to test completely filled analytic matrices for validity without 
actually reading the message! This testing is in fact the crux of 
this chapter. 

Let’s examine an actual example. We are given the following 
cipher-text message which we suspect is the result of a completely 
filled enciphering matrix. The key-length is unknown. 


URIRT PEGRV ATEPI AFZSS ITLFU 
MAHKI ECOLT CWVAW PEYLO RAESL 
ERETO M 


Looking up the message length (56) in the table of Figure 4 on 
page 71, we find that the message might indeed be the result of 
a completely filled enciphering matrix. Further, if the message ts 
the result of a completely filled enciphering matnx, the key-length 
must be either 4, 7, 8, or 14. 

Thus, the four possible completely filled analytic matrices are 
the following: 


(7 <8) 

L234 06 6 F (14 x 4) 
iTRFFTTOP s&s 12346 67 8 9 1011121314 
RY 2M GL BL UTREFLUEVWEOS & 
IAS ATYE RPVPZTMILVERLT 
KRTSHCLSE JBAI SLABTAY AE O 
TEIKWOE RGTASFHCCWLERM 
PPT? VY kT 

EILEAAO 

GAFCWEM 


ee 


_ a 
SS 


(4 x 14) 

12 3 4 

UIKY 

RAIL (8 X 7) 

I FEO 1234567 8 
RZCR UGITKCYL 
TSOA RRALIWLE 
PS LE IVFFEVOR 
EITS RAZUCARE 
GTCL TT SMOWAT 
RLWE PES ALPEO 
VFVR EPIHTESM 
AUAE 

TMWT 

EAPO 

PHEM 


By testing each of these analytic matrices in turn without actually 
reading the message we may obtain the reliability or validity of each 
these particular key-lengths. 

The test which we shall use is based upon the fact that in normal 
plain-text approximately 40% of the letters are vowels; and further, 
that these vowels will be evenly distributed throughout the text! 

Let's start by testing the key-length 14. The analytic matrix 
iS Written out and the number of vowels on each row or line are 
counted: 


Number of 
6 7 8 9 1011121314 Vowels 
7 
2 
ll 
2 


22 





Note that for convenience in counting the vowels are circled. 

The total number of vowels in the matrix is 22. Therefore, 
since there are four rows, and if this is a valid analytic matrix, there 
should be 22/4 or 5.5 vowels on each row. This is with the premise, 
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of course, that the vowels are evenly distributed in the plain-text. This 
5.5 (number of vowels) we call the expected mean for each row. We 
now shall tabulate for each row the difference between the expected 
mean (in this case 5.5) and the actual number of vowels found. 
This difference is called the mean difference.!. We also will tabulate 
the total of the mean differences. Thus: 


Number of Mean 
Vowels Difference 


, 1.5 








2 3.5 

11 2.9 

| 2 3.9 
= 22 14.0 


Since the total of the mean differences is proportional to the 
number of rows, by dividing this total by the number of rows, we 
will obtain an average mean difference for one row. This value 1s 
termed the validity value of the matrix. Thus in the present case, 
the total of the mean differences (14.0) divided by the number of 
rows (4) is equal to 3.50 which is the validity value of the matrix. 

We know now how to obtain the validity value of the matrix, 
but how do we interpret the particular value which we obtain? To 
answer this question a considerable number of tests have been made 
and the results are substantially as follows: 


Validity Values 
—_—__—___—_— 0), 76 +———___—> 1.10 


Valid Incorrect 
Matrix Indefinite Matrix 


In the indefinite range, from the value 0.75 to the value 1.10, 
the more closely that a tabulated validity value is to 0.75, the more 
likely it is that the matrix is valid. Conversely, the more closely 
that a tabulated value is to 1.10, the more likely it is that the matrix 
iS Incorrect. 





1 Also termed deviation from the mean. 
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In the case of the analytic matrix which we have just tested, the 
tabulated validity value was found to be 3.50. It is evident that 
this value is extremely high in the incorrect matrix range. Hence 
there is but little doubt that the analytic matrix (key-length of 14) 
is incorrect. 

Let us similarly test the key-length 7. The results are as follows: 


Number of Mean 
7 Vowels Difference 


aa 
1.8 
Bok 
2.8 
1.2 
Li 
3 A 


8 
_ total 14,9 —total mean 
~ vowels (“differences 


22/8=2.8 expected mean. 14. 0/8=1. 80 validity value 
of the matrix. 





The tabulated validity value 1.80 is well within the incorrect range 
and we can therefore conclude that the analytic matrix (key-length 
of 7), like the analytic matrix for key-length 14, is probably incorrect. 

Let us continue our testing, this time testing the possible key- 
length 8. Results are as follows: 


Number of Mean 
12345 67 8 Vowels Difference 
UGHT KCAL 3 i 
DOME A 3 Tt 
QV FF®VOR 3 1 
R@AZWC@R® 4 9 
Oem, POO 2 1.1 
P®)S@L POO 4 9 
© P@MHT®S M 3 1 

99 — total 33. _ total mean 


~ vowels ~ differences 
22/7=8.1 expected mean. 3.3/7=0.47 validity value 


of the matrix. 


_ 





The validity value of the matrix found in this case is well within 
the valid matrix range’ and we may therefore conclude that it is quite 
likely that this analytic matrix (key-length 8) is valid or correct! 
That is, the validity value of 0.47 as found indicates that the vowels 
of the message are evenly distributed on the seven rows of the 
8 <7 matrix. This is of course indicative of a valid matnx. 

To complete the record, however, and also to introduce a slight 
modification in our testing procedure, Jet us test the last possible 
key-length (4). 

As in the standard testing, the message is written in the form 
of the analytic matrix and again the vowels are circled. 


(S)- 

AEH) no 

20 37r@0@Or|« 
(CO) We 


(Fs) w (es 


4<7O@wHwOa 
QQ4arHawWnan 


j) +3 
= 


=o (>) 

be | 

)0 = 
ty) 


OC) 


M 


At this point we come to the slight modification in testing men- 
tioned above. Since the rows are so short, the test made in the 
normal fashion is not reliable. Therefore, when the rows are short 
(six letters or less), it is better to combine the rows in pairs. Thus, 
in the present case we shall combine successive rows in pairs and 
make the validity test as usual. The result is the following: 





‘See page 65 for the interpretation of validity value ranges. 


—_- hy 


Number of Mean 
Vowels Difference 


pak 

ae) 

«= 
or 


ae —} 
Mn) N ALD) 

=—lim© fel) (ola wo 
a (O) 


a5) top 
os nd | 
=ol(a>) eas 
— 

mo] 


8 


1.3 


J) 
=| O 
t 
—s 
-_— 


< 
<=, 


total _ total mean 
e= Vowels 1 = differences 
22/7=38.1 expected mean. 7.1/7=1.01 validity value 


of the matrix. 


The tabulated validity value, 1.01, is high in the indefinite range 
and therefore is probably incorrect. In fact, since we have already 
found key-length 7 to be correct, the validity value of 1.01 would 
have to be incorrect. Note that the total number of vowels (22) 
is divided in this case by the number of pairs of rows (7) in order 
to obtain the expected mean. The total of the mean differences is 
similarly divided by the number of pairs of columns in order to 
obtain the desired validity value of the matrix. 

To summarize, we have made the following four tests of possible 
size completely filled matrices: 


Validity Value 


Key-Length of the Matrix 
14 3. 00 
8 0.47 
it 1. 80 
4 ths UL 
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It is easily seen that the key-length 8 with a validity value of 
0.47 stands well above the others and therefore most likely is correct. 

As a concluding remark concerning the identification of the com- 
pletely filled matrix, the cryptanalyst should not completely rely upon 
the validity values obtained to the blindness of everything else. Thus, 
for example, high frequency bigraphs and trigraphs should be on the 
same row in a valid analytic matrix, and when making his validity tests 
the cryptanalyst should keep his eyes open for these. For example, 
if the letter Q is on a row which lacks a letter U, the cryptanalyst 
would certainly view the analytic matrix with some suspicion, though 
such a situation might arise if the column containing the letter Q 
were the right hand column in the enciphering matrix (in which case 
the letter U would be on the row beneath the row containing the 


letter Q). 
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FIGURE 4 


TABLE OF KEY-LENGTHS AND COLUMN-LENGTHS 
OF COMPLETELY FILLED MATRICES—GIVEN THE 
MESSAGE-LENGTH 


This table covers message-lengths from 15 to 300 letters. The 
key-lengths considered are from 3 to 25. In reading the expressions 
to the right of the various message-lengths, the first number of the 
expression is the key-length and the second number jis the column- 
length. Thus, for example, in the expression 229 (which follows 
the message-length 198), the key-length is 22 and the column-length 
is 9. Many message-lengths may be the result of several sizes of 
completely filled matrices. These various sizes are listed within the 
limits above. 
nesses eee 

15—3 x5, 5x8 

lo—4 4. 8x2 

17— 

18-3 6,63 9x2 

19— 

20—4x5,5x4,10x2 

21—3 X7,7x«3 

22—11x2 

23— 

24—38,4x6,6x4,8x3 12x2 
25—5 X5 

26—13 x2 

27—3X9,9x3 

28—4X 7,74, 14K2 

29— 

30—3 10,56, 6x5, 10X3,15x«2 
31— 

382—4X8 8x4 16x2 

33—3 X11,11x*3 

34—17 x2 

30-5 X7, 7X5 

36—3 X12,4x9,6X6,9x4,12x3 18x2 
37— 

38—19 x2 

39—3 X13, 138K3 


a FH): 





40—410,5x8, 8x5, 104, 20x2 
41— 

42—3X14,6X7, 7X6, 143, 21x2 
43— 

44—4X11,11 4, 22x2 

45—3 X15,5x9,9x5,15x3 
46—23 x2 

47— 
48—3x16,4X12,68,8x6,12x4, 163, 24x2 
49—7Xx7 

50—5 x 10,105, 25x2 

51—3 «17,173 
52—4x*13,138x4 

a} ce 

54—3 *18,6x9,9x6,18x3 
55—5 xX 11,1165 

56—4x14, 7X8, 8x7,14x4 
57—3 <X19,19x3 

038 — 

59— 

60—8 x 20, 415,512,610, 106, 12x5, 15x4, 20 x3 
61— 

§2— 

63—3 X21, 7X9, 9X7, 21X3 
64—4x16,8x8,16x4 

65—5 X 13,135 

66—3 X 22,6X 11, 11 X6, 22x3 
67— 

68—4x*17,17x4 

69—3 X 23, 23 x3 

70—5 X14, 7x10, 107, 14x5 
T1i— 

72—3 x 24,418, 6x12,8x9, 9x8, 12x6, 18X4, 24x3 
13— 

74— 

19—3 X 25,515, 15 x5, 25x3 
76—4X19,19 x4 
77—7X11,11x7 

(S326, 6X13, 138.xX6 

9— 

80—4 x 20,516, 8X10, 108, 165, 20 x4 
81—3 X 27,9x9 

82— 

83— 


= 





84—3 x 28, 4x 21,614, 7X12, 127,146, 21 x4 
85—517,17X5 
86— 
87—3 x 29 
88—4 x 22,811,118, 22x4 
89— 
90—3 x30, 518,615,910, 109, 15x6, 18x5 
91—7 X13, 13 x7 
92—4 x 23, 23 x4 
938—3 x31 
94— 
95—5x19,19x5 
96—3 x 32,4x24,6x16,8X12, 128, 166, 24x4 
97— 
98—7X14,14x7 
99—3 x33, 9x11,11x9 
100—4 x 25, 5x20, 10x10, 20 x5, 25x4 
101— 
102—3 x 34,617,176 
103— 
104—4 X 26, 8X13, 138 
105—3 x 35, 5x 21, 7X15, 157, 215 
106— 
107— 
108—8 x 36, 4 X 27, 6X18, 9x12, 12x9, 186 
109— 
110—5 x 22, 1011, 11X10, 225 
111—3 x 87 
112—4 x 28, 7X16, 8x 14, 148, 16x7 
113— 
114—3 X 38, 6X19, 196 
115—5 x 23, 23 x5 
116—4 x 29 
117—8 x 39, 9x18, 13x9 
118— 
119—7 X17, 17X7 
120—3 x 40, 4x30, 5x 24,6 x 20,8 x15, 1012, 158, 206, 24x«5 
121—11 X11 
122— 
123—3 x 41 
124—4x 31 
125—5 x 25, 25x65 
126—3 xX 42,6 X21, 7X 18,914, 149, 187, 21x6 
1Zi— 


— 





128—4 x 32, 8x16, 16x8 

129—3 x 43 

130—5 x 26, 10X13, 1310 

131— 

132—3 x44, 433, 6x22, 11x12, 12x11, 22x6 
139—719, 197 

134— 

135—3 x 45, 5X 27, 9X15, 159 

136—4 x 34, 8x17, 178 

137— 

138—3 x 46, 6 x 23, 23 x6 

139— 

140—4 x 35, 5X28, 7X20, 10x14, 14x10, 20x7 
141—3 x 47 

142— 

149—11 X13) 10X11 

144—3x 48 4X36, 6X 24, 8X18, 9X16, 12x12, 16x9, 18x8, 24x6 
145—5 x 29 

146— 

147—3 X49, 7X21, 217 

148—4 x 37 

149— 

150—3 x50, 5x30, 6X 25, 10X15, 15x10, 25x6 
151— 

152—4 x 38, 8x19, 19x8 

153—3 x 51, 917,179 

154—7 x 22, 1114, 1411, 22x7 

155—3 x $l 

156—3 «52, 4x39, 6 x 26, 12x13, 18x12 
157— 

158— 

159—3 x 53 

160—4 x 40, 5x32, 8X20, 10X16, 16X10, 20x8 
161—7 X 23, 23 X7 

162—3 x 54, 627, 9X18, 18x9 

163— 

164—4 x41 

165—3 x55, 5X33, 11x15, 15x11 

166— 

167— 


168—3 x56, 4x 42, 6 x 28, 7X24, 8X21, 12x14, 14X12, 218, 24xX7 


169—13 X13 
170—5 x 34, 10X17, 17X10 
171—3 X57, 9x19, 19x9 
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| 





172—4x 43 
173— 

174—3 * 58, 6 x 29 

TD ooo, Te, eh 

1/6—4 xX 44, 8x 22,1116, 16x11, 22x8 

177—3 X 59 

178— 

179— 

180—3 x 60, 4 x 45, 5X 36, 6 x30, 9X 20, 10X18, 12X15, 1512, 18x10, 20x9 
181— 

tag—T X20, 13 4, JAK 

183—3 x 61 

181— 4 x 46, 8 X 23, 23 x8 

185—5 X 37 

186—3 x 62, 6X31 

187—11X17,17X11 

188—4 x 47 

189—3 x 63, 7X 27, 9x21, 21 x9 

190—5 x 38, 10 x 19, 19 X10 

191— 

192—3 x64, 4x 48 6x32, 8x24 12X16, 1612, 24x8 
193— 

194— 

195—3 X65, 5 X89, 138 15,15 X13 

196—4 x 49, 7X 28, 14X14 

197— 

198—3 x 66, 6 X 83, 9x 22,1118, 18x11, 22x9 
199— 

200—4 x 50, 5x 40, 8 x 25, 10 x 20, 20 X 10, 25 x8 
201—3 X 67 

202— 

2037 X29 

201—3 X68, 4X51, 6 x34, 12X17, 17X12 
205—9d X 41 

206 

207—3 x 69, 9X 23, 23 x9 

208—4 x 52,8 x 26, 138 x16, 16X13 

209—11 x19, 19x11 

910—3 x 70, 5x 42, 6X 35, 7X30, 10 x21, 14X15, 15 «14, 21x10 
2l1— 

212—4 X53 

2138—3 X 71 

214— 

215—5 x 43 


a | oo 





—_ 


216—3 X 72, 4X 54, 6 X36, 8 X27, 9x24, 12x18 1812, 24x«9 

217—7 x31 

218 — 

219—3 xX 73 

220—4 x 55, 5x 44, 10 x 22, 11 X 20, 20 11, 22x10 

221—13 X17, 17X13 

222—3 X 74, 6 X37 

van 

224—4 x 56, 7X32, 8X28, 14x16, 16x14 

225—3 x 75, 5X 45, 9X 25, 15X15, 25x9 

226— 

227T— 

228—3 X 76, 4X 57,638, 12x19, 19x12 

229— 

230—5 x 46, 10 x 23, 23 X10 

231—3 <x 77, 7X38, 11X21, 21x11 

232—4 x 58, 8 X29 

23a3— 

234—3 X78, 6X39, 9X26, 138 X18, 18X13 

235—5 X 47 

236—4 X 59 

237—3 X79 

238—7 x 34, 14X17, 17x14 

239— 

240—3 X80, 4x60, 5x 48, 6X40, 8x30, 10X24, 12X20, 15 x16, 16X15, 20 x12, 
24x10 

241— 

242—11 X 22, 22X11 

243—3 X 81,9 X27 

244—4 X61 

245—5 X49, 7X35 

246—3 < 82,6 X41 

247—13 X19, 19 x13 

248—4 x 62,8 X31 

249—8 X83 

250—5 x 50, 10 x 25, 25 X10 

251— 

252—3 x 84, 4x63, 6X42, 7X36, 9X 28, 12X21, 14x18, 18x14, 21x12 

253—11 X 23, 23 x11 

204— 

255—3 x 85,551, 1517, 17X15 

256—4 x 64, 8 x 32, 16 X16 

2o7— 

258—3 X 86, 6 x 43 


She 








209—7 X 37 

260—4 x 65, 5 X52, 10X26, 13 x 20, 20 13 

261—3 x 87,9 x 29 

262— 

263— 

264—3 88, 4x 66,644, 8x33, 11x24, 1222 22x12 24x11 
265—5 x53 

266—7 X38, 1419, 19x14 

267—3 X 89 

268—4 x 67 

269— 

270—3 x 90, 6x 54,6 x45, 9X30, 10X27, 15x18 18x15 
271— 

272—4 x 68, 8x 34, 16 X17,17x16 

2iae8 BSL, T RSS 12). 21S 

274— 

2160 X bo, 1LX 25, 25X11 

276—8 X 92, 4x 69, 6 x 46, 12 X 23, 23 x 12 

277— 

218— 

279—3 X93,9x31 

280—4 x 70, 5X 56, 7x 40, 8X35, 10x 28 14x20, 20x14 
261— 

282—3 x 94,6 X47 

283— 

284—4 x 71 

289—3 X 95, 5K 67, 15K 19,1915 

286—11 X 26, 13 X 22, 22 x13 

287—7 X41 

288—3 X 96, 4X 72,6 x 48, 8x36, 9 x32, 12 24,1618, 18x16 24x12 
289—17 X17 

290—5 x 58, 10 x 29 

291—3 X97 

292—4 x 73 

293— 

294—3 x 98,649, 7x 42,1421, 21x14 

295—B5 x 59 

296—4 x 74, 8 X37 

297—3 x 99, 9 X33, 11 X27 

298— 

299—13 x 23, 23 X18 
300—3 X 100, 4 x 75, 5X60, 6 X50, 10 X80, 12 X 25, 15 X 20, 20 X15, 25x12 





Problems 


a completely filled matrix. 


dl. 


OZ. 


Bo. 


34. 


3o. 


36. 


AHHGL 
ETOMR 
DNSPE 
GSINS 


INNYC 
EMRAE 
TY¥iiD 
ERNAA 


ADIUO 


NOLES. 


ATPLT 


PC ¥ GY: 
II RNN 
ALRNR 


NPLRM 
ECEPO 
USETY 
IOIAS 


NIOSX 
CWNIN 
ION Patol 
HYCYF 
UAT hr 


TLSGB 
WEREI 
XENHF 
MRTDA 


OTSDN 
PRULD 
HOI BO 
OWHOS 


SNAPO 
RLFOM 
WANEA 


NFNSO 
NAENI 
IRTUS 


GOFAT 
TIAAD 
TNLIH 
CVGFD 


NWEVN 
OOAWE 
DTRAI 
HSRRL 
ROGIU 


WTCSN 
SOTDE 
PIINE 
KTD 


SOULW 
SOALT 
UNOXC 
AIHAU 


RIRAN 
ERETT 
IWADE 


HOASE 
SREED 
EIASG 


RRHRT 
LFEYE 
ELOOB 
RCOPP 


VELWR 
IEDXE 
PINAI 
TEIYT 
DS 


Each of the following messages has been enciphered with 


OW te yok 
OLIAS 
HATCA 


PTEGN 
TBOTR 
LOTFA 


WIMIE 
TNKEB 
GD 


SCENT 
MSCAT 
ONONI 


LNIJF 
THEVL 
EY ITO 
EUAUN 





of, 


38. 


39. 


4(). 





IAOEP 
II BOE 
ETWOO 
RGPRP 
GAAAD 
ERC KW 


SAIWN 
NEEIW 
GTIEL 


URBRI 
DAMEG 
TSBEN 
ANNLE 
NNRP I 


CKIAC 
DLCTH 
ELUPT 
HNSNR 


PISTY 
RTLON 
AUEHV 
EIWRE 
EMNIE 
BS UP 


ANIMT 
HSRBT 
io Pf 


ROEPD 
YFRAE 
KEEOE 
XNTEE 
DSV 


ESAIA 
SWSSU 
APSIA 
SLOTL 


IUPUS 
IDHST 
KDEFB 
AUEMD 
SISUE 
OLLIM 


AESOE 
TRLSO 
OAOIE 


ESANS 
DTSDL 
NMUAM 
RCETI 


NOLVR 
MKECV 
OEYEM 
LAFIT 


— 


TASAM 
ETWOS 
BASII 
LUEXE 


ANOSM 
RDIBN 
SEEHO 


SLGHP 
KNIEH 
ANTIW 
SOBQC 
SRSLUN 


LOUCT 
UOHDL 


INOTR 
FGTOT 
PEASF 
OLKDE 


TEEEC 
STPTE 
MSORR 


Chapter XII 


Cryptanalytic Solution 


Given: The Key-length plus a Probable Word 
in the Text. 


The problem of solving a single columnar transposition cipher, 
given the key-length and a probable word in the text, is relatively 
simple. Given the key-length, which in itself is possibly ninety- 
percent of the solution, allows the cryptanalyst to mechanically con- 
struct the analytic matrix, and the analytical juxtapositioning of the 
matrix columns is then facilitated greatly by the given probable word. 
Let us go through the steps in the solution of an actual example. 
We are given the following cipher-text message together with the 
key-length 9 plus the probable word NEW YORK: 


RCRKA LPTNA TALMO IDFNV TRTIN 
FLEFR IONOI WOPIE CGOAF RDCUH 
OIAIT ELLPR IRPSN EYRRC IHITI 
OTWUO IDSPF SOIEK GMN 


The monoliteral frequency distribution of the message is easily 
tabulated as follows: 


£O 


UVWXYZ 


EPs i 


Li) 1 free © 


bil HAY tH 


Given the key-length 9, construction of the analytic matrix’ 
is routine: 


eeepc atm ttn EON APOC ALE LALLA ALAA AL ALAA 


1 See Chapter VIII. 

















TICOI 
TROGIRHG 
RATINOAPIS 
CLIOAISTP 
RMNIFTNIF 
KOFWREEOS 
AILODLYTO 
LDEPCLRWI 
PRFFIUPRUS 
TNREHRCOK 
NVICOTIIIG 
ATOGIRHDM 
TRNOAPISN 


The cryptanalyst’s task now is to rearrange these nine columns 
to yield the plain-text message. To do this the cryptanalyst uses 
the probably word NEW YORK. Examination of the monoliteral 
frequency distribution shows that the letters of the probable word 
NEW YORK occurred with the following frequencies: 


NEWYORK 
frequency=6521992 


The letters in which we are most interested are those letters which 
are most easily identifiable in the cipher-text message. The letter 
Y with a frequency of 1 is of course the ideal situation, for the 
one letter Y in the message must be the letter Y in our given probable 
word! The letter Y in the analytic matrix is found and circled: 


J 
— 
EQ? 
<) 
Hy 


wv 

>| 
DO 

nn 


Seas OMCAOD TD FrIOM 


<_ 
UAH DUOC Mal 
Hmeanmnd)m za 


Yyranwvurr ADO 
Myoaszyonmosr 
Zor Damrey ae ya 
OMAMRHVWOBZ4OZwO 
SAO H!H 
ZEQOAMM OMM'N 


WOAOG 


| 
Oo 
ro) 
| 





By identifying the letter Y in the analytic matrix we are able to 
narrow down considerably the location within the columns of the 
remaining letters of the probable word NEW YORK. 

Thus, the remaining letters of the probable word NEW YORK 
must occur within the following limits: 





TICOI 
TROGIRH 
RATINOAPIS 
CLM oJAISTP 
RIMNIFITNIF 
KOFWREIEOS 
AILODLIGTO 
1, sae EE Ts EE; 2:1 ae eee ln tee Tinie 

PIF FIUPRUIE 
TNREHRCOK 
NVICOIIIG 
ATOGIRHDM 
TRNOAPISN 


How these limits within the columns are obtained is very im- 
portant. There are several somewhat mechanical methods for 
obtaining these limits. The following is one of these: 

As we remember from the construction of the analytic matrix,’ 
below the matrix cap the cipher-text message is written in suc- 
cessive columns from left to right. In marking off the limitations 
or limits we treat the columns (staying below the matrix cap) just 
as if the message were written out horizontally. Thus we start at 
the given known letter—in this case the letter Y—and mark off both 
forward and backward first the number of long column lengths— 
in this case three column lengths of 11—and then the remaining 
short column lengths— in this case column lengths of 10—until the 
entire matrix is marked off. The analytic matrix at this point will 
look as follows: 


ee 


1 See Chapter VIII. 
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TICOTI 
TROGIRH 
RATINOAPIS 
CLIOAISTP 
RMNIFTNIF 
KOFWREEOS 
AILODL@®TO 
LDEPCLRWI 
PFFIUPRUE 
TNREHRCOK 
NVICOIIIG 
ATOGIRHDM 
TRNOAPISN 


This marking off of long columns and then short columns within 
the analytic matrix might perhaps be more easily understood if the 
cipher-text message beneath the matrix cap is actually written out 
horizontally and the same marking is done: 


RCRKALPTNATAI/MOIDFNVTRTIN 
: 10 ————— ——_—__—_—+ 














PEEFRIONOTWOPLECGOAFRDCUH 
10 . 4 , 4 sooo 








T I 


OTATT/ELLPRIRPSNE@RRCIHI 
Py een Fi — 


OTWUOIDSPFSOIE/KGMN 

————+ +———— I] 

Compare this marking off with the marking off within the analytic 
matrix above. 

The next step in our marking off of the limits within the columns 
may seemingly be a little complicated but actually it isn’t as com- 
plicated as it seems. Using the analytic matrix Cap aS a guide we 
obtain a series of numbers, in this case 23444432. These num- 
bers are obtained from the “‘cap” as follows: 

















Note that in obtaining this series of numbers from right to left we 
count the number of letters in cach column including one letter 
beneath the cap! 

With these series of numbers we mark off the ends of the already 
marked off columns. In the horizontal message this marking off of 
the ends will appear as follows: 

4 4 4 
RCR/KALP/TNATALMOID/FNVTRT/IN 

4 3 
FL/EFRION/OIWO/PIECGOA/FRD/CUH 
2 
OIAIT/EL/LPRIRPSNEQ@RRCIHITI 
2 3 

O/T W/UOIDSPFS/0O1 EKGMN 


And the analytic matrix with the marked off “ends” is as follows: 


ae 


by 
Sl Ply 
op) 


KH mMe ODDO Zaly mH 
AOHOqG|snvlony|. 


Zew2@QnrAlmar olny 


Y>ZPylyut ep A|[Wa 

'ZRowrtsy mes ZelYAlas 
OMRAwmRewWOaRH OBAOor 
FrFHOMmMCAO|O Arion a 
aoa" Mae il sal lon <>) Le Mend te ®) 


Dada mylondo 


The limits of the letters of the probably word NEW YORK 
are these “ends” of the marked off columns. It should be noted 
that the use of the series of numbers, in this case 2344443 2, is 
only a method of convenience to obtain the desired limitations within 
the respective columns. The same result is obtained, if instead of 
using the series of numbers, you simply mark off new columns— 
going away from the letter Y—with first the six short columns (of 
length 10) and then finishing up with the long columns. This is 
the reverse of our first step above when we marked off first the 
long columns and then the short columns. 


aan Bes 


We shall return to the “theory” behind this limitation of columns 
later; however, for now let us continue the solution of our given 
message. We now have the following analytic matrix: 





Probable word NEW YORK 
will occur within these limits. 


H 
IS 
T P 
I F 
OS 
T O 
W I 
ULE 
OK 
IG 
DM 
SN 


Since the letter Y occurs in column 7 we have the following be- 
ginning for the juxtaposition or reconstruction of columns in the 
enciphering matrix: 


NEWYORK 


SH MHODWDK AnH |(N 


Examination of the columns of the analytic matrix shows that 
there is but one letter K within the given limits of the columns. 
This is the letter K in column 1. Therefore, we may add column 1 
to our juxtaposition: 
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7 1 

I 

R 

Y 
S R 
NC 
E R 
NEWYORK 
R A 
R  L 
C P 
I T 
H N 
I A 
T 


In a similar manner, the letter N can come only from column 3: 


a if 
I 
R 
T P 
R SR 
T NC 
I E  R 
NEWYORK 
F RA 
L Rk IL 
E cP 
F T 
R H N 
I I A 
0 T 
N 


The letter R can come only from column 5. and another column 


may be added: 
— §§ — 
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R C 
T P G 
R S OR 
T N AC 
I E FR 
NEWYORK 
F R DA 
L R CL 
E Cc UP 
F I HT 
R H ON 
I IA 
O AT 
N 


In the juxtaposition of column 5 with column 1, note the high- 
frequency bigraphs which result. These “good” bigraphs confirm the 
validity of our analysis to this point. 

At this point solution is practically guaranteed. With the already 
recovered bigraphs, plus the word NEW YORK, and the limitations 
within the columns of the letters NEW YORK, solution is routine. For 
example, the letter E of NEW YORK can only come from either 
column 6 or 9, etc. At this point we shall end our solution. How- 
ever, the student for his own benefit should finish the complete 
solution. 

We mentioned earlier in this chapter that we would return to the 
theory behind the limitations within columns. Because of the im- 
portance of this particular phase of solution, we shall finish this 
chapter with a few final remarks regarding this “theory.” 

Note the following enciphering matrix with consideration given 
only to the letters on one line: 





It may be seen that the literal distance from one letter to another 
will always be either a long column length or a short column length. 
Consider the same letters in the matrix as follows: 


ed 


emo 


Note again that the distance between any two letters is a column 
lensth—and in this particular case, more specifically, the distance 
is a short column length. 

But consider now the following: 


Se ee 


—— eee | eee 





Here we see an exception! The distance between the letters 
S or H and F or U is one less than a short column length. 

Having looked at these enciphering matrices containing the word 
FURNISH, we arrive at an important fact: Except for the 
last exception above, successive letters of plam-text not longer 
than the key-length (as the word FURNISH above for example) in 
the final cipher-text message will be separated by a multiple of long 
and short columns. Even the exception does not apply unless the 
number of successive plain-text letters is at least two letters longer 
than the number of long columns in the enciphering matrix. 

It should be realized that the important fact of successive letters 
being separated in the final cipher-text by a multiple of column 
lengths was the basis for obtaining the limits within columns of 
the letters of the probable word NEW YORK—as was done some- 
what mechanically earlier in this chapter. 

When those limitations were found, the letter Y was used as the 
“basic” letter. Since there were only three letters to the left of the 
letter Y (NEW), and only three letters to the right of the letter Y 
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(ORK), the exception above was not applicable (since the number 
of long columns in the matrix was 3). However, if the “basic” 
letter had been the letter N (instead of Y), the exception would 
have been applicable and the letters ORK might have occurred out- 
side the limitations. This exception is perhaps an improbability, 
but the student should be aware of its possibility. 
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4}. 


42. 


43. 


44. 


45. 


Problems 


Given the key-length of 8 and the probable word EXTRACT. 


OIICN ISLSN TEOOE DYSCE WIRLF 
NEWEO DTSHS FGTAM TPIAI XEWRX& 
FOSKC ONENA ROKOW EOEWL NOTEM 
TLETT KIMTR RTSRP NE 


Given the key-length 16 and the probable word UTILIZED. 


WEPRE 
LLRAI 
IULID 
CDUST 
RLSNH 
UFSBE 


UTAND 
OARAM 
NMCTR 
IAOYR 
ICERS 
UDUEA 
TSEYH 


IBLOH 
RSTSC 
CEEPT 
TOEAC 
HORDF 
RT 2 © 


ZTWPO 
AOLEO 
RHYOT 
LSIOI 
ECIMO 
UY NT wD 


LEDAA 
ICETL 
TAVSU 
Li¥OLr 
AENOS 
£ 


TOAER 
LNEIE 
CIONS 
LOSQY 
BMCAA 
ERKBE 


DOBIM 
AHOZE 
MPALL 
MC IRD 
FOTOW 


GSPCS 
ARCAF 
YMIER 
OOTEN 
HLNVI 
XNECN 


FTREN 


REETE 


ENAUE 
TMSFR 
TAEPT 


Given the key-length 16 and the probable word MEXICO CITY. 


EFXRP 
PO-E i. 
CSISA 
OVUSF 
OOCOE 
SETFIl 


Given the key-length 9 and the probable word KEY WEST. 


UIKUI MANIS SFYFR OITRE EEITU 
TIDSN SOAIB GENEA SVNMH YIDNT 
EGEFB IECDA NOTTH PRGAT WDFSG 


S 


Given the key-length 12 and the probable word TWELVE. 


WEWNM DJOLT ZWENC CAOST OASKC 
TOERD ILZEE RAETP EUECT VIAOT 
BIANA LRRPO HIAKO HEOWD TEZOS 
PIITE RLSTN AROVT ET 


46. 


47. 


48. 


49. 


50. 


Given the key-length 10 and the probable word REQUEST. 
EJHOO ITABDL TMENJ TSICU NPKKT 
ODEEE WSOHN ERSSH INSDL SATTW 
EDLRD HEIEN PIEEQ OICRX MEPET 
ENNUO WVHRT SDYSI LEU 


Given the key-length 11 and the probable word TWELVE. 


MOLMX RNERT VATHE HNWCN OTEFI 
EONBN TTNTH EINIO EUPUL ITSAM 
ONLRC EGW 


Given the key-length 10 and the probable word STOP. 


SEFRF RBOLI HLWOH RNSOE EEFET 
ACTPE HAEIN ELPNT OSDLF CAOEN 


Given the key-length 10 and the probable word STRIKE. 
NNNRS IKOCI TPOEL NOORN PITPE 
TICSC EPORA OTTAW UTOIP FDLFA 
TNOSR TINTE GEKOY DCGAI SRSEM 
ESUOT MER 


Given the key-length 6 and the probable word WILL. 


EQNBI YETHA MLRDO EXXUT ESORY 
RPIUE TWITI WFHCT SEELN BBNT 


Chapter XIII 


Cryptanalytic Solution 


Given: A Probable Word in the Text. 


The last chapter discussed the cryptanalytic solution of the single 
columnar transposition cipher given a probable word in the text 
plus the key-length. In this chapter we shall now consider the same 
problem except that this time we shall not know the key-length. 

Since there are but a limited number of possible key-lengths, 
it is obvious that merely by trial-and-error we might reduce the prob- 
lem in this chapter to the same problem whose solution was taken up 
in the last chapter. This is, we might simply try key-length after 
key-length until we finally hit the one which leads to solution. At 
first this might seem a tedious task. However, depending upon the 
particular cipher-text message involved plus the known “probable 
word”, this trial-and-error testing can often be done fairly rapidly. 
Consider for example the following cryptogram where we are given 
the probable word ACKNOWLEDGE: 


EERAN SIEOO YDYSL PEECL TETIV 
OCPTT REOUR WAOOE TDIEE TEFTI 
OOESN AWTRS SNYWF TRCLS URSSE 
MHAKE DDUAY GSPRY MBSCF PCSEQ 
OTORD SIEHL IERRY EECIG NPEDP 
TRKPE HNOCE ALSNT BSROO BKJAE 
A 


As a first step in solution we construct a biliteral frequency 
distribution of the message: 


A—NOWKYLE 
B—SSK 

FSI 
USP 
ECTOTETFSMDQHRECDHAA 


moms 


P 
I 
R 
= 
N 


Pleo Lele 
Writ 


——~ 
—= 

a 
=a 
——— 





H—ALN 

I—EVEOEEG 

J—A 

K—EP J 

L—PTSIS 

M—HB 

N—SAYPOT 
O—OYCUOEOETRCOB 
P—ETRCETE 

Q—O 
R—AEWSCSYDRYKO 
S—ILNSNUSEPCEINR 
T—EITRDEIRRORB 
U—RRA 

¥=-Q9 

W—ATFEF 

— 

Y—DSWGME 

—_ 


One important thing 1s immediately noted—the text contains the 
letter Q. How this may provide a major wedge towards solution 
will be seen later. For now let’s consider what the minimum key- 
length might be. Since we are provided with the probable word 
ACKNOWLEDGE we can use the same technique as described in 
Chapter VII to determine whether or not the given probable word is 
longer than the key-length. If the probable word is longer than the 
key-length, solution will of course be greatly simplified. Thus, 
following the procedure of Chapter VII, using the given probable 
word ACKNOWLEDGE and the biliteral frequency distribution, we 
obtain the following: 


=zO ZA 
MOovomr Holz 
@ovu@r slo 
mMoOoomcel|= 


ee 
Oe 
Q Otm)r 


av 
© 


Provided that the probable word ACKNOWLEDGE is valid, 
from the above diagram it is seen that the minimum possible good 
key-length is 10. In this case the last letter E of ACKNOWLEDGE 
will fall under the first Jetter A as follows: 


ACKNOWLEDG 
E 


Therefore, let us begin our trial-and-error testing of key-lengths 
by beginning with the key-length 10. Since we are fortunate to have 
a letter Q in the message, we can use the fact that the letter Q is 
normally followed by the letter U as a test for the initial validity of 
the constructed analytic matrix. That is, for the key-length 10 we 
shall first construct the analytic matrix, then using Q as the “basic 
letter” we shall determine the limits of adjacent letters. We thus 
arrive at the following: 


Key-Length 10 


(Fy 
u 
—_ 
— 
— 
“4 


aK Zin 
St mynQ<rIdCuvumrAr a 
>i ru RIWoOonnwnHA Zune |S 


—_ 
NODOHOOANRIODVAIANY 


SaDCQora 


<_ 
NNADAASPIZHAHOOCO- HAAS 
Dopowm vz 






OOM -A~nwe raw 


MmanAwvoaco<nrdyan row 


Letters adjacent to Q must 
occur within these limits. 





mreromKwoes 

Home ow O|O ©} 
SUnnwanoowtny 
Panam Kiara mre raya |ny 
>m QO Zl Biv A 


Since it is evident that there is no letter U within the limits of the 
letters adjacent to the letter Q, the key-length 10 may be considered 
as in-valid and we may proceed to the next possible key-length 11: 
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Key-Length 11 






Letters adjacent to Q must 
occur within these limits. 






Ame esa MmAOoUmMmaHN 
Ya ie MH MOMoRTowaWAA 
MOMR(ACHOMANHAMAA 
ADP DLAIO MAM eaMnomMaon 
OANDimtnnmMsatamwmwaaap< 
NZ ASHenns{resehemonn 
Me AWM eMmHHOOhnNAaA < 
ORIBIH MHAODmM se caOOmMnA 
NAH WMAOAe We > OO 
NOMA An WOOCnMQRrN 





Again there is no letter U within the limits obtained for adjacent 
letters to “basic letter” Q. Key-length 11 may thus also be discarded. 


We proceed to key-length 12: 


Key-Length 12 


Letters adjacent to Q must 
occur within these limits. 





FInbMntBoonMNab< 
eeYAMmZOURICH NS! 
CPemrIMWMOr OZAWA eyo 
VGOROMANnNRK WMH | mlm 
Nm CAS IMnoOBAONnA OBO 


NMS rete MWAADAHOUMAIA Hs 
NAH SRI MON ND MAND =o 


EHOOWnNae ae HMunNZ > Sik 








se DA mee 





No letter U occurs within the limits obtained and therefore the 


key-length 12 may also be discarded. 


| he F 


We continue with key-length 


Key-Length 13 





Letters adjacent to Q must 
occur within these limits. 


EIN MMIOO MW s/o 
Wal mZAIOOomM anak 

x) fad CJ 0D JA a QA AG 
MOnmeWit YQ WwmyHWWo 
MANOA NWACHORMANH 
MOQ AD FH O MG eS Sano mA 
ONnNDAnNnHMI= TMaeMnanedt 
Hee MnMN A Ashe MoH nPrm 
Me Whe OjohOnZ ae Hanm 
IMeItDOCMHEQ]WHOIR A & 
He OORHRMHOPAs 

Al nNAMUHMWOWRINe 
Met ZnaeWolora 


ed and 


Once again no letter U occurs within the limits obtain 


therefore the key-length 13 may be discarded. We turn to key-len 


14: 


eth 


Key-Length 14 








Letters adjacent to Q must 
occur within these limits. 


Minwmoomwni ahe 

Mmiywoiowm@dynAanA 
HHO Zin|i/mOWe mado oo 
MimjaeH|oe ee WWo-ud 
ONMQAOHOMAN-=AHA 
OnNMIG HAMNnOnRAOMnm 
QS mid wWQAADtHAoONO 
SFaamownoennwha a 
Hn ZAl\teeelnnaAnsee 
Qe PDH Mme OOhNA 
emoprmet tloonHAnf 
ee > OJOMHR MAO 

SHHOAnMMNAIM MMOH R A 
Mme atZ nee Woop 


At last! A letter U occurs within the obtained limits. Let us 
juxtapose column 10, containing the letter Q, in front of column 4, 
containing the letter U, thus putting the Q U together as follows: 


104 


CR 
SE 


Visually the bigraphs look excellent! It is likely that with the 
key-length of 14 we have finally hit the correct key-length. How can 
we now use our probable word ACKNOWLEDGE at this point? 
If these two columns are correctly juxtaposed, it js likely that the 
word ACKNOWLEDGE has at some point crossed these two 
columns. We can look therefore within these juxtaposed columns 
for bicraphs formed from successive letters of the probable word 
ACKNOWLEDGE. That ts, in the two juxtaposed columns above 
we can look for any of the following bigraphs: 


AC 
CK 
KN 
NO 
OW 
WL 
LE 
ED 
DG 
GE 


In the two juxtaposed columns we find two such bigraphs: 
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p—A 
> 
po 


Mm MmMODOHnODmNnNOaA 
—“|OHRHOOCrFSaXNCONsa 


Re 


If the bigraph LE is correctly from the word ACKNOWLEDGE, 
it will be followed by the letter D—which letter should be on the 
bottom of the constructed analytic matrix. However, there is no 
letter D on or close to the bottom of the analytic matrix. Therefore, 
we may conclude that the bigraph LE 1s not from the word ACK- 
NEWLEDGE. Consider however the bigraph ED. If ED correctly 
comes from the word ACKNOWLEDGE, it will be followed by the 
letter G. Sure enough, there is such a G in column 8. ‘Therefore, 
let us juxtapose column 8 against the two already juxtaposed columns. 


104 8 
CRE 
SEM 
EOH 
QUA 
ORK 
TWE 
OAD 
ROD 
DOU 
SEA 
ie 
(ACKNOWL) EDG (E) 
HIS 
Lie 


Juxtaposed column 8 looks excellent together with columns 10 and 
4, and there is little doubt but that we now have finally hit pay dirt. 
Using the letter E from column 10 as the “basic letter” let us see 


wee OF a 





where the remaining letters from the probable w 


EDGE can be found. 


tr 1 
Mm o< ro 
Gj wo 
a |4 


MmnNOHI<t PCavuUUvUmMA PrP may |x 
<a e? laws? OW Me B=, 


—_- 


mons Swe! 
Mur nm 
KAMmMOoOOTrsaaDCowmn |. 


<i OO 
eo ar! 
Ot 
xj — 
ply pan 


ClO 
ZaulnnwDanrorAls 


HmAaAWWOQOoOa 
ANS ZNNnNDASSe~nNA|O® 


WmmMNrmoorA Deas wwe Oo | 


ty] Cyr I OD mM OD 


aa 


oS 
—" 
at 
~_— 
bo 
pt 
Co 
— 
— 


Letters adjacent to E must 
occur within these limits. 


ord ACKNOWL- 












From the limits of the letters adjacent to the letter E the letters 
W and L of ACKNOWLEDGE can only come from columns 6 and 2 
respectively. These columns therefore may be added to the already 


juxtaposed columns 1048: 


(ACKNO) WLEDG (EB) 


621045 


E CRE 
5S SEM 
NYLEOH 
ADQUA 
WYORK 
TSTWE 
RLOAD 
SPROD 
SEDOU 
NESEA 
AGL? Y 


ie aa & 
TELEP 


It is obvious that these columns are correct and at this point 
solution is virtually assured. The student himself may complete 


solution. 
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It should be realized that in the elimination of key-lengths up to 
key-length 14, use was made of the almost invariable bigraph QU. 
Each of the eliminated key-lengths could just as well have been elimi- 
nated by using as the basic letter, not Q, but G (which occurred twice 
in the message )—and if the remaining letters of the probable word 
ACKNOWLEDGE could not be found within the limits obtained, 
the key-length could be rejected. 

Another line of attack against this problem might also have been 
by using the idea of the invariable bigraph QU falling above or below 
the probable word ACKNOWLEDGE in the enciphering matrix. In 
our solution above we used this possibility after identifying a particu- 
lar key-length and a particular QU bigraph. However, the problem 
might initially have been approached through this possibility without 
first having identified a particular key-length and a particular bigraph 
QU. 

Thus, in the message text there is but one letter Q and three U’s. 
It is evident that one of the U’s will follow the single Q. We may 
therefore write down these possible combinations (QU) with extet 
sions of text above and below the formed bigraph as follows: 


YI YS YS 
MV MN MS 
BO BY BE 
SC SW SM 
CP CF CH 
FT FT FA 
PT PE Ee. 
CR CC CE 
SE SL SD 
EO ES ED 
100 QU _ 34 100 QU 71 100 QU 8&8 
OR OR OA 
wa TS ea 
OA OS OG 
RO KE RS 
DO DM ee 
SE SH SR 
ht TA [x 
ED KK EM 
H I HE HB 
LE LD LS 


aon OB) was 





The numbers on both sides of the columns above are the respec- 
tive positions of the letters Q and U in the cipher-text message. 
We now search the formed extensions for bigraphs formed by suc- 
cessive letters from the word ACKNOWLEDGE. Three such bi- 
graphs are found: 


Y I YS YS 
MV MN MS 
BO Ba BE 
SC SW SM 
CP CF CH 
al FT FS. 
a PR Pit 
CR CC CE 
SE SL SD 
EO ES ED/ 
100 QU 34 100 QU 71 100 QU_ 88 
OR OR OA 
TW TS TY 
OA OS OG 
RO RE RS 
DO DM D F 
SE SH SR 
IT TA L 
DY EK EM 
H I HE HB 
LE/ LD LS 


Let us consider first the bigraph ED in the right-hand column 
above. If the bigraph ED comes from the word ACKNOWLEDGE, 
the ED must be followed by the letter G. In the cipher-text message 
the letter G occurs twice. Visually we can see also that immediately 
below the ED 1s the bigraph QU. Since QU is invariable followed by 
a vowel, we can note which letter G in the cipher-text message is 
followed by a vowel. In one case G is followed by the letter S 
and in the other case by the letter N. Therefore, since no vowel 
follows G in the message proper, we can consider that the bigraph 
ED in the right-hand column is in-valid and does not come from 
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the word ACKNOWLEDGE. This leaves, therefore, only two bi- 
graphs to consider, both in the first column on the left. Of these two 
bigraphs let’s consider the bigraph ED. As before, the bigraph 
ED must be followed by the letter G; and since there are only two 
G’s in the message, it is easy enough to juxtapose both G's against 
the left-hand column above: 


~ oY YIT 
MV L MV O 
BOS BOR 
SCcU ScD 
CPR Grs 
FTS FT I 
PTS PTE 
CRE CRH 
SEM SEL 
EOH EOI 
QUA QUE 
ORK ORR 
TWE TWR 
OAD OAY 
ROD ROE 
DOU DOE 
SEA SEC 
ITY ITI 


(ACKNOWL)EDG(E) (ACKNOWL)EDG(E) 
HIS BAIN 
LEP LEP 


Paying particular attention to the trigraphs between the QU- and 
EDG it is probable that the juxtaposition of columns on the right 
is incorrect. OAY for example is an almost impossible combination 
of plain-text letters, as is DOE and ROE, though the latter could 
possibly arise trom ZERO EIGHT. On the other hand, the juxtaposi- 
tion of columns on the left looks good up as far as QUA. EOH looks 
impossible, and it appears that if the juxtaposition of columns on the 
left is a correct juxtaposition of columns, the trigraph QUA is on 
the top line of the enciphering matrix. Assuming then that the 
juxtaposition on the left is correct, we note that the letter L occurs 
five times in the message. Let us juxtapose each of these five L’s 
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= a 
ee 


against the juxtaposition of columns on the left above as follows: 





(1) (2) (3) (4) (5) 
IQUA DQUA SQUA TQUA PQUA 
EORK YORK NORK OORK EORK 
OTWE STWE YTWE RTWE HTWE 
OOAD LOAD WOAD DOAD NOAD 
YROD PROD FROD SROD OROD 
DDOU EDOU TDOU IDOU CDOU 
YSEA ESEA RSEA ESEA ESEA 
SITY CITY CITY HITY AITY 
LEDG LEDG LEDG LEDG LEDG 
PHIS THIS SHIS IHIS SHIS 
ELEP ELEP ULEP ELEP NLEP 


Examining the juxtapositions of columns above, particularly not- 
ing high-frequency or “good” combinations of letters, it is quickly 
seen that the juxtaposition (2) looks particularly good. Therefore, 
at this point let us analyze this juxtaposition (2) more closely. 
Particularly, let us determine the positions where the letters DQUA 
occur within the cipher-text message: 


Sequence of letters—D Q U A 
Where letters occur—12 100 34 78 


If these four letters, DQUA, are adjacent in the enciphering 
matrix, they will be separated in the final cipher-text message by a 
multiple of column lengths. 

Therefore, let us examine the intervals between these letters: 





Letter Position Interval 
D aad - 
U | Ad 
A 78 
Q 100) - 


From the intervals between these letters it certainly appears as if 
a column length of 11 or 22 is involved. If we consider the column 
length to be 22, the letter D of DQUA, in position 12 will be in the 
middle of a column—since the first 22 letters of the cipher-text will 





1 See Chapter XI]. 
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be column |. However, we have already determined that DQUA 
is probably on the top of the enciphering matrix. Therefore, the 
letter D of DQUA will not be in the middle of a column. but 
instead will be at the top of a column. In which case. with the D 
of DQUA being in position 12. a column length of I1 ts perfect: 
We can therefore conclude that at least nine columns of length 11 are 
involved, since the interval between D im position 12 and Q m posi- 
tion 100 is 88 which must be a multiple of columns (8 <11=88). 
The only key-length which gives rise to nine columns of I1 ts key- 
leneth 14 which will produce eleven columns of length Il and three 
of Ieneth 10, expressed in short form: 


Il1—Il's 


I31= 3—10s 


Thus, in short we have analytically determined the key-length [4 
from the positions of letters in the cipher-text—these letters known 
to be adjacent in the enciphering matrix. 
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ie 


54. 


i. 


56. 


Sis 


Problems 


Probable word ENEMY. 

IOREN NREIU TEARY 
GANRF ATSLL ACHPD 
FTPGC AOONR OMIET 


Probable word QUESTION. 
ORMET LIIIA MHPIM 


SARNS RXEHT TOGEW 
EIEHF INEEH ANIEL 


Probable word ALEXANDER. 


POWRN EXRCO SSLSU 
TEVES ONNTO ALTED 


Probable word SIX O'CLOCK. 


TCTBT KYPTP USTOU 
EEHNW OCEKN EOTES 
ELNCL FODEO LMOCI 
Pr 


Probable word WILLIAMS. 


DTSOV HCTPS RVBCW 
UAEEO NMWTT DTNTS 
SCNNN NIORR EDAIL 
STNIT TIEYO 


Probable word OLYMPIC. 


WOTYT RPTKA BWTCN 
OACLR EPRTE IHFOG 
TCEEC POTIO HISRL 
LOXII OTXA 


Probable word MESSAGE. 


LPEYS OWSNO ECLEE 
CHINS EKOPI SLGR 
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NS TWL 
IREAA 
TS 


EUTET 
AROQS 
ELNN 


FEDIF 
I LB 


PONEM 
OSTOO 
NTGPE 


Sip i X 
AEIOE 
SOPTE 


RHORF 
OEGTE 
IRNME 


BMLLU 


WCPEN 
LKOOD 


IBEDD 
SEDMB 


ABEAI 


NUXTO 
IIFLS 
ALACA 


EIOLT 
OIEAC 
CCIAP 


MHLAA 
OYENT 
SBSSP 


TIAGB 


58. 


a 


60. Probable word SOUTH. 


EWKS O 
ELENA 
OEDOO 
LEOGS 
NEY OL 


EHAIP 
GOMFO 
POHBIY 
PUINB 
SRAUT 
OAVRR 


FIWDK 
GEEHS 
RLOOF 


CEESW 


II VID 
OINPS 
DOBIF 
RTDNL 
OAEME 


VIYCD 
AWETN 
SCSYR 
FARND 
IDTAA 
NIMIS 


MFIZT 
CTEWE 
EI LOE 
TTON 


Probable word KNOXVILLE. 


WEHED 
EBBVP 
LXYCE 
IAAES 
NULRC 


Probable word INFORMATION. 


AOONC 
ANCUO 
RISSE 
XTTOR 
RNINT 
IHTUE 


VNSUS 
NEAPW 
DRE UR 
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CUDDE 
HNELL 
ROEIE 
RNEHH 
BA 


LUNEK 
LSDMO 
RBFEE 
DAREE 
NPPLA 


TARNE 
LILLT 
RLNHA 


NDEQE 
ANTWE 
I TDWE 
LSIND 


SMTLT 
FOLOE 
ROSET 
OYTEN 
TOOEN 


EHOPA 
RISBE 
AIOAS 





Chapter XIV 


Cryptanalytic Solution 


Given: The Key-Length 

In this chapter we approach the edge of the general solution ot 
the sinele columnar transposition cipher. In this chapter we are given 
as our only assist towards solution, the key-length. Since there are 
but a limited number of possible key-lengths, one general solution 
might be the successive testing of various possible key-lengths. The 
leneth of time it takes to test a particular key-length is indeed the 
crux of this chapter. This length of time depends upon the particular 
cipher-text message or cryptogram. In fact, it is impossible to state 
for all cases how Idhg it will take to test a particular key-length. 
The only completely reliable test is to actually solve the cipher— 
which indeed thereby proves the key-length—though a key-length 
may be tested in a manner similar to that shown in Chapter XI. In 
this respect, however, while Chapter XI concerned itself only with 
the “completely filled matrix,” this somewhat similar test made of 
the “incompletely filled matrix” offers unfortunately a much less 
degree of reliability. In the latter part of this chapter this particular 
test will be taken up. 

Given the key-length of the cipher-text message, solution will 
depend upon various factors. Amongst these factors are: the length 
of the message, the length of the key, the particular plain-text being 
enciphered, and even such a thing as the “good fortune” of the 
cryptanalyst. Let us go through the process of solution. We are 
given the following cryptogram with the known key-length 12: 


OF FTE ASMTN RAPSM COIWA RNSOJI 
DPSOA ESCPG TRFHH TTDNI SOTII 
DFNIO TNTSA DLUEU IMRUI EKAME 
NLDIT LTANI EIEIO LSENC OOSRU 
UINUI VTEAG NRE 
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Since we are given the key-length 12, we can easily construct 
the analytic matrix: 


1234567 8 9101112 
RSOE 
SFOTUM 
WOHTNIEN 
NAAHITMNIN 
ORRETIISRLECU 
FANSTDAUDIOI 
FPSCDFDIIEOV 
TSOPNNLETIST 
EMIGIIUKLORE 
ACDTSOEATLUA 
SOPROTUMASUG 
MISFTNIENEIN 
TWOHITMNINNR 
NAAHISRLECUE 


We can also easily tabulate the monoliteral frequency distribution 
of the message: 


ABCDEFGHIJKLMNOPQRSTUVWXYZ 
# =4¥F===zF ~=Z=FFZ= 7777-7 

= i - ee ee a 

= t = — == 


At this point let’s take a look at Figure 5 on the next page 
which is a listing of the one hundred most frequent trigraphs in the 
English language. 

It will be noted that the letter G occurs in only one of the 100 
most frequent trigraphs, ING, which is one of the ten most frequent 
trigraphs. From the monoliteral frequency distribution we see that 
the letter G has occurred twice. Is it unreasonable to assume that 
one of these G’s might have occurred !n or from the tngraph ING? 
Let us test this assumption. In the analytic matrix let us circle one of 
the G’s. At the same time let us find the “limits” of adjacent letters 
to the letter G. We thus have the following: 


Nites 





A] N* 
ALL* 
AME 
AND** 
ANT 
ANY 
ARD 
ARE* 
ART 
AST 
AT E** 
AT I* 
AVE 


BUT 


COM 
CON* 


THE 100 MOST FREQUENT TRIGRAPHS 


DAY 
DER 
DES 
DIN 


EAR 
ECT 
KEN 
ENC 
ENT** 
ERA 
ERE** 
BES" 
ESS 
ES ur 
EV E* 


POR 


HAS 
HAT* 
HER** 
HIS* 
HOU 


ICA 
ICH 
I LL* 
INE 
[LNG™ 
INT 
ION** 
Le 
IVE 


LAR 
LES 


*~** most frequent trigraph. 
** ten most frequent trigraphs. 
* next most frequent 20 trigraphs. 





FIGURE §. 
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OUT 
OVE 


PER 
PRE 
PRO 


RAT 
REA 


RE D* 
RES* 


ROM 


SAN 
STA 
STE 
STI 

STR 


T E D* 
TER* 
1S 
THA* 


THE*** 


THI 
THO 
TIC 
2 h N 
r Loe 
TRA 
TUR 


UND 
URE 


VEN 
VER* 


WAS 
WER 
WHE 
WHI 
WIL 
WIT 


9 1011 12 


+ 
NO 
Ww 
ee 


\ 


— 


8 
E 
U 
[ 


= 


\ 
R 


| 


E 
N 


Om 


CF] eo 
i 


Sar 

Ol 

vO 
TM WDIAOVONM?F. OM 


¢ 




























L 
D 
[ 


nS 





<7 
‘ 


‘ 


MWS 








MeOmMarorFnasAszAoin 


pt Se 
MMA) MA 


OZ Mam Or f— 


Cj 2 =(e_C 


ame eHOoMe ZO sora in 
1) ee -4 [dae ae 


Zayesin -eimeins 
SAHOO RIM oy & 5 

>DOM yO oO 

NIZA O- Sao  - AON In 


It is noted upon examination of the “limits” of adjacent letters 
that there are only two possible letter N’s which might be adjacent to 
the letter G—one of these is in column 5 and the other is in column 6. 
Let's put each of these N’s next to the letter G and see how the 
juxtaposed columns look. Even better, we can use the letrer contact 
weight chart (Figure 3) shown on page 55 and obtain a validity 
weicht for each of the juxtapositions. 





512 1 6 12 

R S 

FU 1 OU 3 
HI 2 I 3 
HV 0 IV 2 
“Pp 8 iT #2 
TE 2 DE 2 
DA 2 FA 1 
NG 2 NG 2? 
IN 3 IN +) 
S R 0 OR 2? 
OE 0 TE 2? 
T N _ 
I “dd T 22 
I S 


— 109 — 


The juxtaposition of columns 6 and 12, yielding a validity 
weight of 22, looks excellent at this point. Using the letter N mn 
column 6 as the “basic letter”, let us obtain the “limits” of adjacent 
letters—as was done with the letter G as the “basic letter.” 


Or2zms 


OO BN Wr AI 





TMADAOVANESrON 





9 eel” [lle Bl One| 
QOZwnarO- 
qVIz-caamnooog 
RAZ OPwya< 


>a 


2 
=—arJONHNMZOAaDoyA in 
SramcrvuYrawAya2znOo |X 
9 Men? el 
mC 


Zoisnrws F 


oo 


It the letter N in column 6 and the letter G in column 12 are 
adjacent in the enciphering matrix (as we presume them to be, since 
their columns yield a validity weight of 22), the limits of adjacent 
letters as obtained will be valid for both the basic letter G and the 
basic letter N. Since the term adjacent letters refers to letters adjacent 
within a Key-length’, we can combine the limits of adjacent letters 
as found for the basic letter N and as found for the basic letter G. 
Thus the more narrow limits of adjacent letters to the pair of letters 
NG 1s the following: 





' See pages 86-88 for discussion of ‘‘adjacent letters ’’. 
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1234567 8 9 101112 


HSH tO) 2 mlm 





which results in: 


1234567 8 9101112 


|S eNdOZzma 





SMA eHYH aa 
MDE Sep PMw qe aH 
ORZEeEMNI LAW PIRP Kee 
NOH HALE OhZHN 
Ci TMS HQ Z| nO 

N20 HI NJO WW OB &@ & Ho 

=aoleZnlongano«c 
Zim tm ns OO; = < 
Om mat NS SZ 





If we continue with our ort 
column 12 has occurred in the trigraph ING, it will be seen from 


the above limits of adjacent letters that there is but one letter I 


which can preceed the bigraph NG (from columns 6 and 12). 


assumption that the letter G in 


ginal 


This 


—IIl— 


| 
| 





is the letter I in column 3. Therefore, let us juxtapose column 3 in 
front of columns 6 and 12. 





3 6 12 
S 
wou 
ATI 
RIV 
NIT 
SDE 
OFA 
ING 
DIN 
POR 
STE 
ON 
A T 
S 


The three juxtaposed columns look excellent and it appears that 
at this point we have a good ‘foot in the door” towards solution, 
At this point the student with three matched columns plus the limits 
of adjacent letters above (still valid for Ictters adjacent to ING) 
should have no trouble in completing solution. 

For now let us leave matched columns and return to the beginning 
of this chapter where the identification of key-length was discussed. 
It was stated that thé only true completely reliable test of a key- 
length was the actual reading of the message, 1.e., solution. However, 
mention was made that there is another test, similar to the test in 
Chapter XI which might give an indication as to the validity or non- 
validity of a particular key-length without the actually reading of the 
message itself. Let’s examine this test which admittedly lacks the 
degree of reliability that the test of Chapter XI had with respect to 
the “completely filled matrix” key-length. 

The theory of this test, similar to the theory of the test in Chapter 
XI, is based upon the fact that vowels will be evently distributed 
throughout a plain-text message. 

Consider the cipher-text message of this chapter. Since we know 
the key-length to be 12, let us first test this key-length. 
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We turn to the analytic matrix (for key-length 12) and dis- 
regarding most of the cap, we circle and count the number of vowels 
in each row as follows: 





Vowels 

ORR®TOMOS CW 5 
PPSCDRDDDBOY 6 
FPSCDFD \O)V 4 
t £ OF Ae ST 38 
pte RE 7 

CDTS 6 
SOPROT be 5 
MQOSFTN IN 5 
ek Lee NR 3 
N@AHOS R ©) 6 


We realize that the vowels on one row of the analytic matrix 
will not be on the same row in the enciphering matrix—as was the 
case in Chapter Xl—however we can say generally speaking that the 
vowels in the upper half of the analytic matrix will be in the upper 
half of the enciphering matrix. Thus, in a valid analytic matrix the 
number of vowels in the upper half of the matrix (less cap) will 
approximate the number of vowels in the Jower half. Let us count 
the number of vowels in the two “halves” above: 


Vowels Totals 


| 25 


G2 ©) O11 S3| “1 Go OD O1 
eS 


Since the two halves each have the same number of vowels, we 
can say that the vowel distribution of the analytic matrix is favorable 


towards ‘“‘a valid analytic matrix.” Let us now test a key-length 
which we know to be in-valid, i.e., a key-length of 14: 
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Vowels 


© 

| 
=C@e 
=e 
ror) 
wD 
S 


TOMC TU)N i 9 
FNU)DPTQOT T V 4 
eee BOL e ; 
A STNFQ@R 
DEROROND Li DUA 8 
@S NOE SWE DENDG 6 
SMS®HOO MQCNN 7 
MCOSHTT®KT QR 5 
TOMC TON LDOMO® 9 


Since there are an odd number (9) of rows, in order to count 
the two “halves,” we shall disregard the middle row: 


Vowels Totals 


20 


CO O71 ~1 D2) CO} OV DO 1 © 
cee parts! 


ee 
| Se) 
~] 


It is noted that the upper half of the analytic matrix contains 
seven less vowels than the lower half. We can say then that thts 
distribution of vowels 1s not favorable towards “a valid analytic 
matrix.” 

To finalize this chapter it should be stated that ‘‘column match- 
ing” 3S more of an art rather than a science and that with practice 
one can become very adept at juxtaposing columns almost visually. 
The idea of Jimiting adjacent letters as was done in this chapter is 
somewhat theoretical and was introduced to give the student back- 
ground; for a good cryptanalyst could certainly have easily solved 
the message without the somewhat tedious analytic steps which we 
went through, However, the student having learned the principle 
has a tool when he needs it! 


ee 


Gl. 


62. 


G5. 


64. 


G3. 


CEUSE 
MUCSU 
ES PDN 
AEIOE 
CCAAT 
UCORT 


EVGOX 
FRMHR 
EOLEA 
EIEOE 
ITNLE 


Key-length 8. 


ENMRE 
ANACYV 
TFRRI 


REAUO 
OPHEN 
UOSBU 
DOLEM 
OACH 


RFAAT 
AWDAN 
TRNIC 
NHUOG 
SSSTA 


Problems 


Key-length 14. 


TNALY 
NOOOT 
ITNAT 
IQOIP 
HRRYY 
IWFLR 


Key-length 11. 


TAEUU 
CPIAT 
KRTPL 
TT VEO 
OAVEN 


NLUCO 
OVVOT 
TFSNI 


Key-length 10. 


AUGOO 
ENTTS 
PE Pt ot 
L ek ly 


Key-length 10. 


SACCT 
HRTTS 
ORNPP 
CREET 


NNFHE 
MHCTR 
ELEPQ 
YNETN 
SHEIR 
WTTEL 


NBTBF 
ISIBF 
ISOLN 
OOTTW 
LHI 


YIVII 
EREIF 
MFICH 


ALHFA 
CODRS 
IBRIT 
IOOEN 
EEMRO 
TOTRT 


SSSUR 
RELDF 
SSEDL 
NISED 


ORETE 
EENOO 
FN 


OTTDT 
TMWEN 
YTCSP 
RNENI 


LUTOE 
TIHOE 
AHHIO 
HTRTT 


ILFNF 
OPMOO 
FCDLE 
ESXAT 
ANFNT 


NWEER 
TETDD 
LTIRR 
MOUAO 


NYTEC 
EDILR 


STEEA 
EKEFT 
HDJOH 
OIISP 


APCMT 
PHNTE 
EIINO 
ERRSS 


66. 


67. 


68. 


69. 


70. 





Key-length 9. 


ILSTA 
TGVRB 
OLLRN 
NROIR 


ATRIE 
EDAET 
XRCNY 
NURCA 


Key-length 8. 
KDTNP 
EKSAF 
OTSLN 


ETTIT 
AATCR 
CSSCE 


Key-length 7. 


OILUTC 
OGPRC 


RTREH 
DOONS 


Key-length 6. 


AXISR 
NASRB 


EDOSG 
TEFN 


Key-length 10. 

REEHS PSAFT 
OESSR EGPYS 
TDIYA WOYAS 
OCNUM IGSTD 
NTPOR SSLED 


OEEPR 
AOEOT 
HPNNR 
OITERT 


EDEHI 
EANS I 
OOONN 


FCMIB 
KDROR 


ASCOA 


REPNL 
WTBSA 
AOLET 
ETNIN 
TIIS 
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ECCIA 
EDEPN 
OTUFL 
SEWC 


OLPEI 
ODNAM 
1 PAT 


SENTW 
HNSLE 


SODYN 


NPITO 
REFET 
FHNFEI 
STPTL 


ELGSN 
SRTAP 
OG dot 


OPESA 
TMEWS 


MEUNC 


YUDNS 
SAITIE 
ENVATI 
EOVCS 





Chapter XV 


Cryptanalytic Solution 
The General Solution 


In previous chapters we have considered the solution of the single 
columnar transposition cipher given various types of “assists”, such as 
knowing a probable word, being given the key-length, etc. These 
“assists” by no means are improbable situations. With but a limited 
number of key-lengths, for example, the cryptanalyst may simply try 
one key-length after another until solution is reached. The same holds 
true of probable words. The cryptanalyst may guess or reason that a 
particular probable word is in a message, test the guess, and if results 
are negative, he may simply try another probable word. The crypt- 
analyst’s procedure in a manner of speaking may be compared to 
that of the flow of electricity. Electricity flows along the path of least 
resistance. Similarly, the cryptanalyst’s normal procedure is to 
arrive at a cryptanalytic solution with the least amount of work, 
trouble, testing, etc. This path of least resistance in the cryptanalyst’s 
solving of a single columnar transposition cipher might be a “trial- 
and-error” technique such as we previously have considered. More 
likely, however, it will be a “general solution” technique. This chapter 
takes up this “general solution” technique. 

Consider the following cipher-text message: 


NCAAO TUAOG SVLIW HAIOH EENIR 
DRBNR UEART IRCNO NENNA LWSSD 
OSNEP TLAPR TTEER BTEAT INDIR 
TDCIS EENIE TONEB DSLDE IUYC!I 


CFLI 


Let us first determine the possible column lengths for this pa 
ticular message. The key-length used to encipher this message most 


én fT ac 




















probably lies between 6 and 


Key-length 


6 


15. Therefore, let us compute the 
column lengths for these possible key-lengths. 


Column Lengths 


2— 18's 
4—17's 


6—15’s 
1—14 


8—13’s 


5—12’s 
4—11’s 


4—|1’s 
6—10’s 


5—10’s 
6— 95 


8— 9's 
4— 8's 


13— &’s 
6— 8&’s 
8S— 7's 
14— 7's 
I— 6 


The tabulation of a monoliteral frequency distribution is easily 


made: 
ABCDEFGHIJKL 
F=f¢E=E “FE F 
= -¢ #¢ 


M 


ltt © 


N 
=e 
7 
fi 
aes 
“a 
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—_ el ad 


We begin our analysis proper by attempting to “match” or juxta- 
pose low-frequency letters. The ideal situation of course is when the 
letter Q occurs in the message. In the present instance since there 
is no letter Q in the message we will have to work with other low- 
frequency letters. For example, the letter L occurs in this particular 
message five times. Is it possible that in the enciphering matrix two 
of these L’s have fallen together, i.e., that the bigraph LL occurs in 
the plain-text message. Let’s examine this possibility. 

Segments of cipher-text containing the letter L are taken out of 
the cipher-text message and put in vertical columns side-by-side. At 
the top of each column is put the position in the cipher-text message 
that the letter L in that column has occurred. We thus have the 
following: 


13 46 «457 «6093108 
A N SS N _ Y 

0 E N E C 

G N E B I 

Ss N P D C 

v A T S F 

dD OO YO YW 
1 w A D I 
vw S P E 

H S R 1 

A bd TU 

1 o T Y 


The first column with the letter L in position 13 also contains 
the letter V. Since the letter V is restricted in contact almost entirely 
to vowels, this first column can only be juxtaposed with another 
column such that the V will contact a vowel. The only possible 
column is the column with the letter L in position 46. Therefore, 
if the L in position 13 1s envolved in the bigraph LL, the only possible 
juxtaposition of columns (such that V contacts a vowel) is the 


following: 
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pat 
io) 
in 
op) 
a 
(op) 
ped 
OO 


P< oa 
al A A 4 
El Zz eS 
Cr NODOPY 


Or 


CUNN= 
COUnNNS 
Hb me 


The juxtaposition on the right looks particularly good. For ex- 
ample, the bigraph NG is excellent. For the moment than let’s con- 
sider this juxtaposition further. 

If this juxtaposition is correct, what key-lengths can give rise to 
this juxtaposition? The difference or distance between the L in posi- 
tion 13 and the L in position 46 is 33. Provided of course that 
the juxtaposition be correct, the 33 then will be a multiple of column 
leneths of the enciphering matrix. Consider the key-length 6 where 

/ 
the column lengths are te The column lengths 17 and 18 will 
not fit into 33. Therefore, a key-length of 6 will not allow the 
juxtaposition of the L in position 13 with the L in 46. 

The mathematical procedure for determining whether particular 
column lengths will fit into a given distance is as follows: The 
short column length is divided into the distance. If the remainder 
is greater than the quotient, the columns will not fit into the distance. 
If the remainder is equal to or less than the quotient, the columns 
will fit into the distance. Thus, in the case just considered the column 
lengths were 17 and 18, and the distance was 33. The short column 
length (17) is divided into the distance (33). The quotient is 1 
and the remainder is 16. Since in this case the remainder is greater 
than the quotient, the lengths will not fit. 

In a similar manner we can determine that the only key-lengths 
which will allow the above juxtaposition of L’s (in position 13 and 
46) are the following: 
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Combination of Columns Giving 


Key-Lengths Column Lengths Rise to Distance 33 
9 ral 3—11's 
10 ae 3—11's 
" ria ai 1 e's 


a 


At this point let us return to our juxtaposition. 


ves 
oP) 
pd 
Co 


Ce aZa ae zm 
rt NOAOD 


OUnns 


In front of the bigraph NG there will likely be the letter I, yielding 


the common trigraph ING. Immediately below the NG is the 
bigraph NS. In front of the NS will certainly be a vowel; and in 
front of the LL will also be a vowel. Let’s examine the cipher-text 
message then for a segment as follows: 


(vowel) 


(vowel) 


Only two possible segments are found and these juxt»posed against 


our already existing juxtaposition look as follows: 
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21 46 18 87 46 13 
HNA ENA 
A EO NE O 
ING ING 
ONS ENS 
HAV TAV 
EL L OLL 
E W Il N W I 
NS W ES W 
ISH BSH 
RDA DDA 
DO I 5 Ol 


Note that the three column juxtaposition on the above left can 
only arise if the key-length is 12. For 21—13=8 and 8 cannot be 
a multiple of column Jengths JO, 11, or 12 which are the column 
Ieneths found in the key-lengths 9 and 10. Instead, 8 can only be 
a multiple of a column Jength 8 found in key-length 12. 

For the moment leaving the three column juxtaposition on the 
above left, let's examine the three column juxtaposition on the right 
above. The key-lengths 9 and 10 can be dispensed with almost 1m- 
mediately. Note the letters G and L in positions 10 and 13 respec- 
tively in the column on the right. If the column length is 10, 11, or 
12 (for key-lengths 9 and 10), the letter G will be at the bottom 
or close to the bottom of a column and the letter L in position 13 
will be in another column! In other words, if the key-length is 9 
or 10, the letters L and G cannot be in the same column! Having 
dispensed with key-lengths 9 and 10, can these three juxtaposed 
columns arise from a key-length of 12? The distance between the 
L in position 46 and L in position 13 is 33 which is valid for key- 
Jength 12 since 45 equals 33. Also the distance between the 
O in position 87 and L in position 46 is 41. Can this distance 
come from key-length 12? The answer is yes, for Le equals 41. 
But what is wrong? 

If you remember, in the entire message with key-length 12 there 

/ 
are ead In the distance 33, 3—8’s have been used, and in the 


distance 41, 4—8’s have been used. This is a total of 7—8’s! This 
is impossible since there are only 4—8's in the entire message (for 
key-length 12). In other words, the three column juxtaposition on 
the above right cannot have occurred from a key-length of 12. There- 


ox TID) aes 


fore, we need only consider the three column juxtaposition on the 
above left as being possible; and moreover, we have already found 


that the juxtaposition can arise only if the key-length is 12! 


Let us construct then the analytic matrix for key-length 12 


together with the limits of adjacent letters for the L in position 13 


and the L in position 46: 


12324667 8 9 WOR 


2 


1234567 8 9 10111 


O bi 
S TA 


A 
R 


R 
ADTNNTTC 





TWIAEORADELC 
UHRENSTIGTOE 


ENDPE(|TISI 
IAEORADIELC 


UBRENETTCRTIU:S 






>Hi 
ZO «(4 Oj] 


AADTNNTIIOEL 


AADTNNTILOBL 


OIRIAEENSNII 


OIRIAEENSNII 


are the limits 


Those limits that are common to both the above 


1.€.7 


of adjacent letters for the bigraph LL, 


1234567 8.9 101112 


mS lO em 1O fy ae 
OZisaimAInwnARn.+ 
On MIMAlZH WMWHeHOG 





Owe CMHMAAHHA? 
> Ome ae HH cet mee 
AAAaAQEnNRnAONAA 
ee omazuaa 

mA mim Dm tm ee 


ZAo<a(aq ole nao 


And the three column juxtaposition containing the trigraph ING 
is the juxtaposition of columns 3, 6, and 2 respectively. 


Using the symbol] (c) for consonant and (v) for vowel let’s see 
which categories of letters will preceed the trigraphs formed by the 
three column juxtaposition above. 


= 





Our object now is to find this particular column among the 
remaining unidentified nine columns of the analytic matrix. The 
consonant which preceeds the trigraph ELL will of course fall within 
the limits of adjacent letters found on page 123; and if such a column 
exists is should easily be found. Column 5 its perfectly: 


Column 5 therefore may be juxtaposed against the first three 


columns: 








The four letters IONS strongly suggest that the letter T precedes 
them. In the analytic matrix there is but one column containing 
the letter T which might fit, i.e., column 9. Therefore, column 9 
mily be added to the juxtaposition: 


95362 
A 
RAEO 

ATING 

TIONS 

IRHAV 

NCELL 

DNEW I 

IONSW 

RNISH 

TERDA 

DNDOI 

CNRS 

[A N 

S E 


Column 9 looks excellent and there is litthe doubt but that we are 
on the right track! With the narrow limitations of the remaining 
columns solution is almost complete. It is left to the student to com- 
plete solution. 

To summarize this general solution: 

(1) Two segments of cipher-text are matched—usually through 
the finding of low-frequency “good” bigraphic letter combinations 
such as QU, LL, LY. NG, etc. 

(2) This matching of segments allows the cryptanalyst to obtain 
a distance which being a multiple of column lengths limits the number 
of key-lengths that might give rise to the obtained distance. 

(3) A third juxtaposed segment or two other matched segments 
will practically always define the key-length of the enciphering 
matrix. 

(4) Given the key-length plus a “narrow” limit of adjacent 
letters, success 1s generally assured! 

(5) Finally, of course, if all fails, the cryptanalyst may turn to 
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the “trial-and-error” method of simply trying a limited number of 
key-lengths, using procedures set forth in Chapter XIV, or the 
probable word method following the method of Chapter XIII. 
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Th 


12. 


13. 


14. 


70. 


76. 





EOETP 
LRNAT 
RANUO 
ITRNR 


TCEUT 
AEESO 
OEETM 
PEBER 


GLVOO 
IEINO 
SEHES 
HLVED 


NVSNA 
SENEN 
MSEFE 
TURSE 
EEITE 
AATRB 
UTEMR 
D Le dt EP 


PTTOL 
PEANC 
NPAIA 


OHCMF 
OTWDT 
OSTLR 
RRIERT 


BCGOC 
MEOIE 
NHYNL 
VNRBC 


RWNCP 
ITRNU 
DSEHV 
IOESF 


ITTCN 
RPEEE 
VNGHL 
NNOHT 


BSUCN 
WPOCE 
MEPRF 
TEPCN 
IAMAT 
POOEW 
USPRE 


Problems 


IAARC 
UHJOA 
ISSO! 
TF 


MEHKE 
TSCEO 
EPNOB 
II iuUP 


SNIID 
METI I 
ORBXH 
CEUEO 


ORNET 
LOPOE 
NRLRE 
ISTNE 
SEPTS 
BWUGO 
FOOTS 


SILC pie. Gell 
GLHHN 


TISGA 
NHOVA 
HIGEI 
UEE 
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RREAF 
TLIEW 
UOUIN 


IOARR 
QSEAD 
TYNVQ 
TTE 


LN O fT 
ZETSFE 
SKILW 
TLNON 


AUCSO 
EINOT 
DEHQI 
TROEO 
LCELH 
LFNOS 
ALERV 


OEDPF 
EFIOA 


LIHNS 
ROHIL 
UGAWC 


Ch 


13. 


79. 


80. 


OTOOS 
WOECE 
OORIR 
FXS PU 


EABDE 
TOETR 
LEBNN 
NUHEL 


KPNEI 
FEEEU 
AIEDN 
TODNR 


OEHSO 
TWEIL 


ERRIS 
RUNEA 
FHPAA 
PELED 


OPRIN 
ELVTY 
KCLOO 
RYTIE 


GDYTI 
PMOSC 
EOAFR 
OOHDN 


GPMEU 
ARTKW 


FIMRE 
OPPCD 
YDESO 
OEDSE 


PSEYH 
TDNEH 
OEURT 
OFT 


TLATO 
SOCYN 
AAMOA 
TSSEN 


MIABS 
EURH 
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VTSDT 
RENTS 
AIOSG 
IWER 


GEVUI 
HCOIH 
URTEN 


ONRLD 


TCCCL 
TRNEN 
RTYPT 


TCDET 
PERCL 
UIATS 


EWDRA 
YANIR 
TSDEB 


LOGLA 





Chapter XVI 
Final Remarks 


I think that it will be agreed that in previous chapters we have 
covered the single columnar transposition cipher quite completely. In 
fact, | am sure that by this time the student must realize that the single 
columnar transposition cipher presents really but little actual crypt- 
analytic difficulty. Determining factors in solution are vanous factors 
within the text of the message itself (does the text contain the letter Q, 
etc.) and even these factors do not actually determine whether or not 
the message can be read, but rather, how long it will take to read the 
message! 

In this chapter we shall mention several “‘odds and ends” that have 
been missed or perhaps have lacked emphasis in previous chapters. In 
a sense then this chapter might be compared to the final ““‘bow-knot”’ 
tied to what the author hopes to be a neat, well-ted package. 

In previous discussions of key-lengths and message lengths, no 
menuon was made of the fact that often correspondents will deliber- 
ately put nu//s, letters having no significance, into the final portion of 
the plain-text message in order that the length of the cipher-text mes- 
sage will be a multuple of five, 1.¢., that all groups of the cipher-text 
will contain five letters. 

Occasionally, correspondents will avoid the use of certain key- 
lengths, such as avoiding key-lengths of 5, 10, 15, 20, etc. This is 
sometimes done under the mistaken belief that this somehow prevents 
the formation of completely filled enciphering matrices. 

How do these efforts of the correspondents affect cryptanalysis? If 
the key-length is restncted to “not multiples of five’, the cryptanalyst 
obviously can narrow down key-length possibilities; and if the plain- 
text message has nulls added to the end of the text in order to make the 
message length a muluple of five, the addition of nulls might make 
soluuion easier. For example, nulls added to the end of the plain-text 
message might be the letters XXXX. If the cryptanalyst in his analysis 
notes an abnormal number of low-frequency letters (such as a number 
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a eae 


of X's), these low frequency letters might be nulls added to the end of 
the message. 

Considering nulls, it is also possible that the correspondents might 
have used nulls for some special miscellaneous purpose, such as for 
example, to separate an internal message number. Thus, the plain-text 
message might perhaps look like this: 


REQUEST YOU TRANSMIT ZZZ THREE Z2Z FUNDS 
IMMEDIATELY 


The ZZZ THREE ZZZ might be an internal message number. 

Let us somewhat summarize the effects of nulls in the plain-text 
message. A monoliteral frequency distribution might reveal to the 
cryptanalyst an abnormal number of a particular low-frequency letter. 
These low-frequency letters (nulls in the plain-text message) might 
fall together in the original plain-text. Naturally of course the crypt- 
analyst must not only be alert to note these abnormal number of 
low-frequency letters but he must also be able to take advantage of 
them. 

Finally, some remarks should be made conceming specialized 
plain-text; that is, text which contains words of a specialized nature. A 
good example might be plain-text which is made up principally of the 
literal digits, ONE, TWO, THREE, FOUR, FIVE SIX, SEVEN, 
EIGHT, NINE, and ZERO. Such a plain-text message might be a 
listing of a group of serial numbers for example. In any case, text of 
this sort greatly facilitates cryptanalytic solution—provided the crypt- 
analyst recognizes the situation! Recognizing plain-text of this nature, 
given only the cipher-text message, is not quite as difficult as at first 
might be imagined. The monoliteral frequency distribution will show 
an “uneven” frequency distribution with few if any A’s, for example, 
many E’s, N’s, and O’s, etc, By this time, having recognized the 
situation, the student should be able quickly to take advantage of 
known plain-text words. 

Another possibility, though admittedly rare, is that where corre- 
spondents might mix numbers or digits in with the literal-text. These 
digits will normally aid solution in that the numbers probably will fall 


together. 
2... a 
| This brings out of course the fact that correspondents to get the most out 


of nulls should use random high-frequency letters. 
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As a final remark, the student should not overlook the possibility 
of correspondents either purposely or in error having taken the col- 
umns off the enciphering matrix in order from left to nght or right to 
left. 
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81. 


82. 


83. 


84. 


85. 


86. 


iis 


88. 


LITIE 
NSSTN 
FHNEG 
EGI 


PT JTS 
TOLNI 
TJUAS 


YGSLA 
ESM5R 


TEWHR 
EZEFS 


EEOIN 
TSUNI 

RRZTW 
OMETO 


RAFAF 
COFNX 
RKRE 


ALFTO 
SETNI 


ELTHO 
CPLES 
YNUTC 


RWNNW 
TOEAN 
VUTFR 


VAFCS 
OSITYV 


U20AA 
ENAEP 


OHIIR 
VTTEO 


EXNPI 
SITCI 
OTENN 
SXOSN 


IQEVD 
IEHER 


OQIAR 
RYOIF 


ISREE 
IEEGC 
NIPPX 


Problems 


NIEBI 
ONEAO 
HERWF 


SIHJA 
NOBRJ 


SODNO 
DR6TS 


OZRIU 
GRLFU 


HLIIR 
RXFNY 
NDMDN 
RPDXU 


UEEIF 
INOVU 


TLISV 
GQATN 


ONORX 
ATONN 
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XRDEO 
WTMES 
TCUEO 


MPVTE 
AJCAV 


DAEE3 


NTSOT 


IITOVE 
EXRHS 
RBLSA 
OTG 


EEFSO 


ZVZRE 


EHROR 


CECLS 
FGTNI 


89. IE5IE SAOGO HTNOU 9PLLR NSOSES 
EGSZS ECRR1 PDEMC YESOX FCO2U 
UPITA NSNOD M2LBA 


9. SNOAO IUGSE LEOEA TXRXZ VNEER 
SORDA EZBWF AXMRZ EEIBE 
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Chapter XVII 
The Computer 


In the last two decades the development of the computer as a 
cryptanalytic tool has substantially enhanced the cryptanalyst’s ability 
to successfully attack many cryptographic systems. While the single 
columnar transposition cipher has always been considered as a weak 
system, with the computer at his disposal the cryptanalyst can now 
make his attack against the cipher even easier. 

Against the single columnar transposition cipher the computer 
generally provides two forms of cryptanalytic assistance: 

(1) The computer may be used in matching columns. While this 
may not be so important when dealing with plaintext, the single colum- 
nar transposition cipher may be used to superencipher coded traffic; 
and in this case the use of a computer to match columns (of coded text) 
will particularly benefit the cryptanalyst. 

(2) The computer can be used in making trial and error tests. 
Millions of tests can be made quickly and reliably when using state-of- 
the-art computers plus parallel processing, etc. The tnal and error 
tests, also termed brute-force tests, may involve the complete deci- 
pherment of given ciphertext. More often the tests will involve only 
the “reading” of a certain amount of initial plaintext. If the initial read 
text turns out to be garbled or random text, the computer will be 
programmed to drop the test and begin a new test. Of course this 1s 
simplification, but the reader has the idea. If the reader is inierested in 
this computer attack against the single columnar transposition cipher, 
he might consider the problem of identifying plaintext given only a 
marginal amount of text. At the same time he might consider the 
number of different numerical keys that can arise from a given key- 
length. It is evident that the longer the possible key-lengths, the greater 
becomes the number of tnal and error tests required. 

For computer-oriented readers the author has written a program in 
BASICA which provides single columnar transposition enciphermer 
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i * (SINGLETR ) 

20 ‘ THIS SINGLE COLUMNAR TRANSPOSITION ENCIPHERMENT PROGRAM HAS BEEN 
30 ' ESPECIALLY WRITTEN IN "BASICA" FOR THIS TEXT BY WAYNE G. BARKER. 
40 CLS 

590 CLEAR 1000 

60 KEY OFF 

TO DEFINT A-Z 

80 DIM M1$(1000) 

90 DIM W2(1000) ,D(25),S1(26) 

100 DIM A$(50),L$(1000) 

110 DIM A(25),T(1000) ,F$(50, 25) 

120 DIM W1$(1000) ,W2$(1000) 

130 LPRINT CHR$(27);CHRS$(69) 

140 INPUT "DO YOU WANT TO ENTER 'NULLS' AT THE END OF MESSAGES (Y OR N 
150 PRINT 

160 IF Q$="n" THEN Q$="N" 

170 IF Q$="N" THEN 280 

180 IF Q$="Y" THEN 210 

190 IF Q$="y" THEN 210 

200 GOTO 140 

210 INPUT “WHICH LETTER DO YOU WANT TO USE AS A ‘NULL'-LETTER” 5;R$ 
220 PRINT 

230 R=ASC(RS) 

240 IF R>64 AND R<91 THEN 270 

250 IF R>96 AND R<123 THEN R=R-32:GOTO 270 
260 GOTO 210 

270 RS=CHRS$(R) 

280 INPUT "Enter Literal Keyword -- ";S$ 
290 LPRINT 

300 FOR I1=1 TO LEN(S$) 

310 A$(1)=MID$(S$,1],1) 

320 A(I)=ASC(MIDS(S$,1,1))-64 

330 IF A(1)=-32 THEN 370 

340 F=F+1 

350 IF A(CI)>26 THEN A(I)=A(1])-32 

360 A(F)=A(1) 

370 NEXT 

380 LPRINT "Literal Keyword -- “"; 

390 FOR J=1 TO LEN(S$) 

400 LPRINT A$(J):; 

410 NEXT 

420 LPRINT: LPRINT 

430 FOR [=] TO F 

440 Z=100 

450 FOR J=1 TO F 

460 IF A(J)“<Z THEN Z=A(J):C=d 

4T0 NEXT 

480 A(C)=50 

490 D(I)=C 

500 NEXT 

510 PRINT 

520 PRINT “ENTER TEXT" 

530 FOR [=1 TO 1000 

5940 XS=INKEY$ 

550 IF X$="" THEN LOCATE,,1:GOTO 540 

560 IF X$=CHR$(8) THEN Y=Y-1:1]=1-2 

570 IF X$=CHR$(8) THEN PRINT CHRS$(29); 

580 IF X$=CHR$(8) THEN PRINT CHR$(255); 
590 1F X$=CHR$(8) THEN PRINT CHR$(29);:GOTO 650 
600 IF X$=CHR$(13) THEN LOCATE,,0:GOTO 660 
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“3Qs 


610 
620 
630 
640 
650 
660 
670 
680 
690 
700 
710 
720 
730 
740 
750 
T60 
7710 
780 
7190 
800 
810 
820 
830 
840 
850 
860 
870 
880 
890 
900 
910 
920 
930 
940 
950 
960 
970 
980 
990 
1000 
1010 
1020 
1030 
1040 
1050 
1060 
1070 
1080 
1090 
1100 
1110 
1120 
1130 
1140 
US 
1160 
1170 
1180 
1190 
1200 


PRINT X$; 

L$(1)=xX$ 

Mi$(1)=L8(1) 

Y-Y+1 

NEXT 

FOR I=1 TO Y 

IF ASC(L$(1))>64 AND ASC(L$(1))¢91 THEN 720 
IF ASC(L$(1))>96 AND ASC(L$(1))<123 THEN 700 
GOTO 750 

L=ASC(L$( 1) )-32 

L$(1)=CHRS$(L) 

K=X+1 

T=X 

L$ (X)=L¢(1) 

NEXT 

PRINT: PRINT 

IF Q$="N” THEN 840 
Z=INT(5*((X/5)-INT(X/5) )+.00001 ) 

IF INT(Z)=1 THEN L$(X+1)=R$:L$(%+2)=RS:L3S(X+3)=RS:LS(X+4)=RS$:2:U=4 
IF INT(Z)=2 THEN L$(X+1)=R$:L$(X+2)=R$:LS(X+3)=RS:U=3 
IF INT(Z)=3 THEN L$(X+1)=R$:L$(X+2)=R$:U=2 


IF INT(Z)=4 THEN LS(X+1)=R$:U=1 
T=X+U 

G=0 

FOR J=1 TO (INT(T/F)+1) 


FOR M=1 TO F 
G=G+1 

IF G=T+1 THEN 920 
F$(J,M)=L$(G) 


NEXT 
NEXT 
FOR J=1 TO F 
B=D(J) 
FOR M=1 TO INT(T/F)+1 
Vi=V1+1 
W1S(V1)=FS(M,B) 
NEXT 
NEXT 
U=0 
FOR [=1 TO Vl 
IF W1$(1)="" THEN 1060 
U=U+1 
W2$(U)=W1$(1) 
W2(U)=ASC(W2$(U))-64 
S1(w2(U) )=S1(W2(U)) +1 
NEXT 
LPRINT 
LPRINT “Entered PLAINTEXT message --" 
LPRINT 
FOR J=1 TO Y 
V6=V6+1 


LPRINT M1$(1);3 

IF M1L$(1)=CHR$(32) AND V6>60 THEN VG=0:LPRINT 
NEXT 

LPRINT: LPRINT: LPRINT: LPRINT 

LPRINT “Resulting CIPHERTEXT message --" 
LPRINT 

FOR 1I=1 TO U 

LPRINT W2$(1)" "3 

IF 1 MOD 5=0 THEN LPRINT " “3 


= 


1210 
1220 
1230 
1240 
1250 
1260 
1270 
1280 
1290 
1300 
1310 


[F 1 MOD 25-0 THEN LPRINT 
NEXT 

LPRINT 

LPRINT “("U")” 


LPRINT:LPRINT: LPRINT 

FOR I=1 TO 26 

IF S1(1)=0 THEN LPRINT CHRS(1+64)" = “:GOTO 1290 
LPRINT CHR$(1+64)" = “S1(T) 

NEXT 

LPRINT CHR$(27);CHR$(70) 

END 
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8 


22, 


a3; 


94. 


so 


NCPEE 
OENSE 
ITRNN 
DQTDI 
ODOOO 
EEAAS 


REUOI 
NNEST 
ITEXEY 
OAGOL 
ZTOOA 
FMNRA 


VNDOA 
RCNTD 
XEOQEN 
EXERE 
OOXWE 
GLRSA 
OENTX 


ERROT 
EIFSO 
Ll DYC 
YARUA 
EEOPU 
DMOTD 


SETAE 
LTPLA 
RHLMO 
TOLTER 
EOHFT 
ANOII 
TBEON 


Problems 


OOISN 
AIRXT 
UUVCF 
OAOUIL 
OTRRU 
TMSUE 


PKRHT 
HRTDO 
ERTWI 
FEEEO 
NEROM 
PCQEN 


RETND 
EIOGA 
HNVME 
HOBCF 
CTWSE 
YRARE 


OMSHG 
RNSFL 
DORIP 
TOETA 


YLNEN 
EACTR 
TRDDE 
KSRUO 
UHYGP 
ELWHY 


NXEZH 
FOSEI 
DEeruUT 
RGRXC 
SENII 
IZSNT 


EUSRO 
RULTS 
TTRAU 
ey dL 
DHTED 
ERAHA 


SHMTT 
OVVEW 
EELOE 
OH Lu 
EHDSI 
UMSLS 


PTLES 
TOTDE 
TEORLE 
TATHE 
OOALY 
HUOCD 
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LARRE 
MEHRH 
LSI 
EFLEA 
JNIDD 
EXOCA 


PLXNE 
ENRVO 
REOSB 
QMNOA 
UNAGE 


VTTAB 
HENNI 
TANGT 
SAWBY 
NTDPE 
OTAYE 


NETLE 
REPDX 
RWVAA 
OAEON 
ICTNS 
TIESX 


HSGAD 
TOE bi 
NRCAD 
ILFED 
UTSEN 
OCIRA 


ITRPC 
EESDI 
Proxv 
BNSOX 
EYSAO 
ETGEX 


RUTMA 
UEORU 
XEUTA 
fie eB 
SESRR 


OIOBR 
DPDEH 
MISCL 
CTRTN 
ROCYS 
EITOHA 


LOXAX 
CIMEM 
NEXNT 
TGYLR 
XAEES 


FLEAT 
GUAET 
SEENS 
FPSPA 
FOPIH 
SESEL 


96. 


7. 


98. 


oo. 


100. 


EEIEN 
RTOGP 
IMTIM 
ESRPS 
NHINT 


ETRRA 
ERIAF 
EZXSE 
ORURY 
EVNCI 
EONSO 
HUZTI 
CNIRT 


EPUME 
KSALS 
TNPRY 
AANRY 


PLMMO 
HKORI 
AOEKO 
KWEYO 
NSEBT 


RRNRS 
AITIOE 
XIIHT 
ATETS 
DLHSP 


OMSQH 
AESSX 
GERRR 
YSMEM 


HPOEF 
ALSRI 
NAYUE 
CIOOC 
TIYAG 
KUIOS 
JROAR 


TIRE P 
TAENE 
SAPNR 


EAEUM 
ENPAI 
AXDAE 
UNNSN 
HIOSS 


RENYF 
OTURE 
AIYEL 
TTLTF 
RMTBE 


ATOTT 
RBTSU 
OETDO 
GDXWA 


TUEEV 
AAADQ 
TUSNH 
TSGKE 
RLOOA 
ISTQU 
RIRTD 


RGOET 
YUHGA 
THUIW 


NSCBR 
UTXET 
EITMR 
GAEIE 
TMAEC 


ONXFY 
TESLS 
ESRAY 
FPEXR 
TGLEE 
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COEIT 
AYLMN 


ASONB 
ERESC 
ELEOT 


NNTXS 
EATOY 
HONFT 
UEGTA 


TUPAO 
IOIMS 
VCQPI 
AEEUD 
SRSEO 


THDTO 
UTSTE 
HLEAN 
TUANH 


NYTNT 
NBGTR 
ILEOF 
PSEER 
TOHEE 
EATRT 
OLURP 


SROSE 
BEPSE 
GIOOO 


EDMIP 
ORULR 
TWACR 
XERNR 


ENSGM 
RRCIA 
CTIED 
PTSVE 
AIINA 


GENERAL INDEX 


Adjacent letters, 

— definition, 110. 

— discussion of, 86-88. 

— in enciphering matrix will be sepa- 
rated in final cipher-text message 
by a multiple of column lengths, 
7, £2, 120. 

— “limits” of, 107, 109-112, 114, 
LZ. 

— ‘more narrow limits” of, 110-111, 
123, 126. 

Anagramming, 53-54, 58. 

Analytic matrix, 37-43, 46, 79-81, 
107, 123. 

— “halves”, 113-114. 

— of completely filled matrix, 53. 

— validity of, 114. 

— with but one column length, 53. 

Art, column matching is an, 59, 114. 

“Assists”, 117. 

“Basic” letter, 87-88, 93-95, 97-99, 
110. 

Bigraph, 56, 86, 96-97, 100-101, 119- 
121. 

— definition, 24. 

— invariable (QU), 99. 

— random, 59. 

— valid, 59. 

— weight of, 55. 

Biliteral frequency distribution, 24-30, 
44-45, 91-92. 

— may serve as monoliteral fre- 
quency distribution, 26-28. 

Blindness of cryptanalyst, 69. 

Brevity, use of “code” to provide, |. 

“Cap” of analytic matrix, 81-83, 113. 

Cipher, 1-3. 

— combination transposition and sub- 
stitution systems, 2. 


— definition. |. 

— substitution, [-3. 

— systems, 1-3. 

— transposition, 1-3. 

Cipher-text, 1. 

— message, 9, 12-13, 79. 

Clear-text message, 14. 

Code, 1-3. 

— book, I. 

— definition, 1. 

— groups, l, 10. 

— systems, 1-2. 

Column, 

— matching, 52-53, 57-58, 112, 114. 

— juxtaposing. 53 (see also column 
matching). 

Columns, 

— length of, 9, 40-1, 53, 70. 

— long, 9, 13-14. 

— of analytic matrix compared with 
columns of enciphering matrix, 
41-42. 

— short. 9, 13-14. 

— taken off enciphering matrix with- 
out using numerical key, 132. 
Completely filled matrix, 52-53, 62-63, 

68, 70, 106. 

— an impossibility, 130-131. 

— definition, 8-9. 

Computing, 

— column lengths, given key-length 
and message-length, 12-13, 38, 53, 
118. 

— size of enciphering matrix, given 
key-length and message-length, 12- 
LS,, 358, 33) 

Consonants, 

— represented by (c), 124. 

— used in column matching, 124-125. 
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Counting, 

— letters in cipher-text message, 12. 

— vowels, 64, 113. 

Cryptanalyst, 54, 56-57, 62-63, 69, 
80, 117, 126, 130-13]. 

— “good’ ‘fortune of, 106. 

Cryptanalytic difficulty of single col- 
umnar transposition cipher, 130. 

Cryptanalytic solution, 

— given: the plain-text beginning of 
a message longer than the key- 
leneth, 29-34. 

— given: plain-text longer than the 
key-length anywhere in the mes- 
sage, 44-49. 

— given: the key-length and a com- 
pletely filled matrix, 52-59. 

— given: the key-length plus a prob- 
able word in the text, 79-88. 

— given: a probable word in the text, 
91-103. 

— given: the key-length, 106-114. 

— the general solution, 117-127. 

Cryptogram, 9, 17, 44, 130. 

Cryptographic, 

— systems, 1-3. 

—= text, 10: 

Decipherment, 12-16. 

— first step, 12, 15. 

— second step, 12-13, 15. 

— third step, 13-15. 

Determination of size of matrix, See 
computing. 

Determining factors in solution of 
single columnar transposition cl- 
pher, 130. 

Determining length of matrix columns 
mechanically, 15. 

Deviation from the mean, 65. 

Difficulty in reading plain-text with- 
out word divisions, 14-15. 

Digits, 

— mixed within literal text of trans- 


position cipher, 132. 

— phonetically spelled out in the 
text, See specialized plain-text. 

__ use in substitution ciphers, lL. 

— within the numerical key, 4. 

Dimensions of matrix, 9, 1}-13. 

Distance, 

— multiple of column lengths, 126. 

“Don’t give up!” 

— advice to the student, 59. 

Easily identifiable letters in cipher- 
text message, 80. 

Element necessary to encipher a mes- 
sage, 8, 11. 

Enciphered-code, 2. 

Enciphering matrix, 8-9, 32, 38. 41, 
47-48, 53-54, S58, 86, 103. 

Encipherment, 8-11, 15, 52. 

— first step, 8, 1), 15. 

— second step, 8, 1], 15. 

— third step; 9-1], 15. 

“Ends” of columns, 83. 

Error of correspondents in not using 
numerical key properly, 132. 
Even distribution of vowels in plain- 

text, 64-68. 

Exception to rule, 

— reference adjacent letters being 
separated by a multiple of column 
leneths in cipher-text message, 87- 
88. 

Expected. 

— frequency of English letters in 100 
Jetters of text, 19. 

— mean, 65-66, 68. 

— percentage of vowels in English 
text, 21, 23, 28, 64. 

— words, 54. 

Factors in solution of the single col- 
umnar transposition cipher, 130. 

Family tree of cryptographic systems, 
[-3. 

Final remarks, 130-132. 
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Flow of electricity compared to crypt- 
analyst's procedure, 117. 

Formula to compute percentage of 
vowels in text, 28. 

Foundation for the cryptanalytic solu- 
tion of columnar transposition 
cipher systems, 37. 

Frequency distribution, 19. 

— norm (English), 19. 

— See also monoliteral frequency 
distribution and biliteral frequency 
distribution. 

G, letter occurs in only one of the 
100 most frequent trigraphs, 108. 

General solution of the single col- 
umnar transposition cipher, 106, 
LDi~L2a. 

“Good” bigraphs, such as CK, LY, 
TH, QU, etc., 53-54, 56, 126. 

“Good” trigraphs, 58. 

“Good fortune”. 

— as a factor in solution, 106. 

Guessing, 29, 54, 117. 

High frequency, 

— bigraphs and trigraphs, 69. 

— Jetters used as nulls, 131. 

Identification of the “Completely Fill- 
ed Matrix”, 62-69. 

Identification of the key-length, 106, 
Liz. 

Identification of the transposition 
cipher, 

— through percentage of vowels in 
message, 21). 

— through use of the monoliteral 
frequency distribution, 19-21. 

— through visual inspection, 21-22. 

Incomplete square, 8. 

Incompletely filled matrix, 52, 62, 106. 

— definition, 8, 9. 

Insuring that the cryptogram contains 
all five letter groups, 130. 

Internal message number, 


— correspondents’ use of, 131. 

Interpretation of validity values, 65, 
67. 

Introduction to cryptanalysis of the 
single columnar transposition ci- 
pher, 29-34. 

Juxtaposition, 47-49. 53-54, 56-57, 59, 
79, 84-86, 96-98, I0I-102. 109- 
biz, 129-125, 

— definition, 53. 

Key, 4-6, 10. 

— in a cipher system, Il, 4. 

— In a code system, I. 

— literal, 4, 34. 

— numerical, 4, 10, 13. 

Key-length, 4, 9, 12-13, 32, 37, 46, 
68, 70, 79, 106-114, 126-127. 

— factor in solution 106. 

— not a muluple of five, 130-131. 

“Key-Lengths and Column-Lengths of 
Completely Filled Matrices— 
Given the Message Length”, 62, 
70-76. 

Key-word, 1, 4, 7, 34. 

Least resistance, 

— cryptanalyst’s desire for path of, 
Lt rs 

Length of. 

— columns, 9, 13-16, 38, 52. 

— kev, See key-length. 

— message, See message-length. 

— time to test a key-length, 106. 

Length of message as a factor in 
solution, 106. 

Letter contact weight chart, 55-59, 
109. 

Letter occurring most frequently in 
English, lv, 25. 

Letter “Q” provides wedge toward 
solution, 92. 

Limitation of possible key-lengths, 
106. (See also restriction by cor- 
respondents as to key-lengths.) 
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Limits (limitations) of adjacent let- 
ters, 81-84, 86-88, 108-)09, 122. 
(See also adjacent letters.) 

— with two “basic” letters, 110-111, 
1 23, 

Literal digits, see specialized plain- 
iON. 

Literal-key, 4-6. 

— recovery not within scope of text, 
34. 

Literal key-word, 10. 

Long column, see columns. 

Low frequency, 

— “vood” bigraphs, 126. 

— abnormal number of low  fre- 
quency letters might be “nulls”, 
131. 

Manual determination of matrix size, 
15, 

Marking off of columns within mes- 
suve (analytic matrix), 81-83. 

Matchine, (See also juxtaposition. ) 

— low frequency letters, 119. 

— segments, 126, 

Matrix, 

— completely filled, 8-9, 52-53, 106, 
130-131. 

— definition, 8. 

— in-completely filled, 8-9, 52-53, 
106, 131. 

— sce also analytic matrix and enci- 
Phering matrix. 

— size expressed by column lengths, 
38. 

— size of, see computing. 

Mean difference, 65-66, 68. 

Mechanical, 

— column matching is not, 59. 

— construction of analytic matrix, 
19, 

— method of determining length of 
matrix columns, 15. 

Memorization, 


— difficulty in memorizing numerical 
key, 4. 

Message length, 9, 13, 15, 38, 53, 63, 
70, 130. 

Monoliteral frequency distribution, 
17-22, 24, 79-80, 107, 118, 131. 

— definition, 17. 

Multiple of five as key-length, 130. 

“Narrow” limits of adjacent letters, 
see adjacent letters. 

Norm for English text, 19-20. 

Nulls, 130-131. 

— definition, 130. 

— used to separate internal message 
number, I31. 

Number of, 

— long columns, 13, 16, 38. 

— short columns, 13, 16, 38. 

Numerical-key, 4, 8, 10, 12, 34, 48. 

— how (to derive from literal-key, 4-6. 

— same numerical-key may _ result 
from two different literal-keys, 
5-6. 

“Odds and ends’, 130. 

Percentage of column lengths which 
cannot have resulted from a com- 
pletely filled matrix, 63. 

Physical determination of size of 
matrix, IS. 

Plain-text, 

— as a factor in solution, 106, 130. 

— message, 14-15, 58, see also clear- 
fext message. 

— sce also specialized plain-text. 

— treatment in cipher system, 1, 3. 

Probable word, 

— in the text, 79-80, 84, 87, 91-72, 
LS, ‘Liz: 

— method, ]27. 

Problems to be solved by student, 35- 
36, 50-51, 60-61, 77-78, 81-90, 
104-105, 115-116, 128-129, 133- 
134. 
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Procedure for determining whether 
or not given column lengths will 
fit into a given distance, 120. 

Q, 

— importance of letter, 92. 

— invariably followed by letter U, 
21. 23, 53, 69, 93, 99-100. 

QU, Invariably followed by a vowel, 
100. 

Questions to be answered by student, 
3, 7, 11, 16, 23, 28, 43. 

Quotient, 120. 

Random, 

— bicraph, 59. 

— numerical-keys, 7. 

— hich-frequency letters and their 
use, [31]. 

Rearranging columns, see jixtaposi- 
1101. 

Recovery of the literal-kKey is not 
within scope of text, 34. 

Reliability of validity values, 64-65. 

Restriction by correspondents as to 
key-lengths, 130-131. 

“Science”, column matching ts not a, 
59, 114. 

Secret inks, 2. 

Security, use of “code” to provide, 1. 

Segments of cipher-text, 121, 126. 

Short column, see colunins. 

Short form, for expressing matrix 
size, 38, 103. 

Single columnar transposition cipher, 

— text covers completely, 130. 

— where it fits in the family tree of 
cryptographic systems, 2. 

Size of matrix, 9, 12, 15, 62, see also 
matrix and computing. 

Sizes of completely filled matrices, 


70-76. 
Specialized plain-text, 131-132. 
Steps, 


— in decipherment, 12-16. 

— in encipherment, 8-11, 15. 

Stereotype, 29. 

Substitution cipher, 1-2. 

Successive letters, separated in the 
final cipher-text by a multiple of 
of column Jengths, 87. 

Summarization of the general solu- 
tions, 126. 

Superfluous letters, 41, 48. 

Symbols used in substitution cipher 
systems, lI. 

Table, 

— of key-lengths and column-lengths 
of completely filled matrices— 
given the message-length, 70-76. 

— of the 100 most frequent trigraphs, 
108. 

— of the expected frequency of let- 
ters in English, 19. 

Testing for completely filled matrix, 
63. 

Theory, 

— behind test with respect to incom- 
pletely filled matrices, 112-114. 
— behind the limitations within col- 

umns, 86-88. 

Tools of the cryptanalyst, 37, 62, 114. 

Tate, 34) 

Transposition cipher, 1-3, 19, 28. 

Trial-and-error, 29, 91, 117, 127. 

Trigraph, 58, 121, 124. 

Trigraphs, 100 most frequent, 108. 

“Troughs and peaks”, used in com- 
paring frequency distributions, 20. 

“Uneven” frequency distribution, 132. 

Valid, 

— analytic matrix, 64, 69, 113-114. 

== bignraph, 39. 

— matrix, 67. 

Validity value of the matrix, 65-69. 

— reliability of, 64-66. 

Validity weight, 56, 109-110. 
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— reliability of, 59. 


Visually matching columns, 57, 114. 


Vowels, 


— evenly distributed in text, 64, 67, 


i t2. 
— expected percentage 
text, 21, 23, 28, 64. 


in’ English 
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— represented by (v), 124. 
— which letters constitute, 21. 
— will follow the bigraph QU, 100. 


— will precede certain combinations 
of letters, 121. 


Words, anagramming of, 54. 
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